{"report_id":"6661b0b4-aff8-4099-bf02-7232f7ce0191","version":6,"status":"done","tags":[],"date":"2026-01-24T23:14:13Z","url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"title":"GhostWareOS","dom":{"size":8185,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (398)","md5":"f46451c29f42be92b797485072e6f689","sha1":"6052a9406dbc6b0989b8b1ef2680aabce6b2d0a8","sha256":"eac4f60c824c2c692b9c0e4f6a4e6fa719c728ad0726d1ae95aef1b67d28fd4c","sha512":"6e76c4cd523233965d15a4bc974d0d3f19a4771befdca38450a3af74594074277549fcb2a7886e03368ede18b4e768b3061191c1900113306ff2239ca345a19c","ssdeep":"96:rhfVU943tgr1hS8k45USz+45ga/lbta89+RzydNA1t9+kex8KdRoZ8I7B1g/M:r3UUC1hS8LUSZga/b9wmII9o8IT","tlshash":"28f182a462fa1e2b818382e974d77509bd01d353d3ac28e5bb6d05e10fc7d91990f2aa","dom_hash":"domhash5833762d13b646d6718afae55768490d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T23:14:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"rewards-ghost.com","ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-01","domain_rank":0,"first_seen":"2026-01-24T14:10:27.283216Z","last_seen":"2026-01-24T14:10:27.283216Z","alert_count":0,"request_count":22,"received_data":4493240,"sent_data":10234,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-01-21T12:44:50.797493Z","alert_count":0,"request_count":6,"received_data":390924,"sent_data":3120,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":2,"received_data":824708,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"framer.com","ip":{"addr":"54.240.174.56","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-12-30","domain_rank":6950,"first_seen":"2019-03-11T22:31:22Z","last_seen":"2026-01-21T12:44:50.695815Z","alert_count":0,"request_count":1,"received_data":1116,"sent_data":788,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d96bc3b21732d5d33e976993c92a8d8f","sha1":"fb2cc3b5ae02921f5a582e07dc1423d537135e97","sha256":"0deaeeef88105f1db81fb27b0afc8717c2dc70bceaa1773df9b605162fd06dfc","sha512":"b211ea0eaf96fd00230b05b29e4e6396780a8c1021f858ab8808db5835fa9a65c18ca383ed7684e09420f0f931ae348a08e6d360afd72cb31e88189404595213","ssdeep":"","tlshash":"f0d023331175802507d44eee78f4f308f6f1641938771b50d94f1c2c7570d82059171c","size":212,"data":"","first_seen":"2025-08-31T20:49:22.485334Z","last_seen":"2026-06-08T21:04:56.10828Z","times_seen":6880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bd2dd3cc2a7c5c5db1adc64d656200b","sha1":"19d92f7bd33f000c77cbfaf22059910226253d9e","sha256":"3b3100c615bfc76490db973610ecf4b11b1c5d90f43b47ad05306d7c0348deb0","sha512":"8e0857f4a72838adac6fdb04a3b5f8d13632800dd80551a3dacc2dd8904c14b9a690115ee766afc3b35fc1541107ef406765727262218efc436aaf7b36856323","ssdeep":"","tlshash":"c1c08c8c214b0cb150bb2b020b6fb305b0063212a4d28a223d0e63046f21e07d784954","size":179,"data":"","first_seen":"2026-01-24T13:55:14.442448Z","last_seen":"2026-01-24T23:14:22.795653Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K6886SW5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7776695bb68c0eb84d81b1727a1c9a91","sha1":"1638865cfa37714529b2fc00e5da6a64bf7ba206","sha256":"64b44ac9bf7f42100e4884cb6cf5cac15906490d9724c43887f0a26e697ec137","sha512":"fcb4d7d6d646178194a4db2ad87d79bb9309799d954db9f111cdaa774b244fa1dc37cda6136b2581dae45399fd56a30b3320f33d0e18760d3e7e38458a9cfc5b","ssdeep":"6144:RJmMvPHQAxJ508RYoeWQlFldbKKCYvdqNtX2:fmMnHQAxJ508RYaudqP2","tlshash":"be6418cdb3d6702693a3a478503f118bb17b6992f84cc899f185d8d42e70aaa4137f7c","size":323817,"data":"","first_seen":"2026-01-24T23:14:22.790902Z","last_seen":"2026-01-24T23:14:22.790902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"441c7bfcef18d7881e46c4d0b3e1ffaf","sha1":"c18046cb627a1af1b30a0a859c6f9bb7df844c09","sha256":"1fcbcbbb892ff61a3cbbe4e1ce54e36f59c2ac0fc7d9902df6bb1a25dee90b51","sha512":"017a66ab8c0fed10b8a9497c0f84625056b7e63ae2a32e3fcdf47777aa51d38a8e4b2a7e6636abbf1ab90a14b2a50b4c931404ae5ef3232e592b3fe671e84ce1","ssdeep":"","tlshash":"f3e028db74110c7270dd05f533b1a1187153120c68091d22ddfdc92428185c74c134cc","size":342,"data":"","first_seen":"2026-01-24T13:55:14.445504Z","last_seen":"2026-01-24T23:14:22.796779Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f7b5f2ae839aa320d52cfa066be3ad6","sha1":"2f3af8cf601d4ab57f7f2bdf037de100132a95ef","sha256":"b76bc843efb451cebe77c317f154e3f75b41970cba1dfeae6f240d9787e0a601","sha512":"6388bd9b04a42353ec7bd70762e7ddb2adba843f0424f3f51507b12884ee68cbd408ebf45efa382977078b8accf713fc48da5d53131479bce562eb1ed80e9860","ssdeep":"","tlshash":"802133f933617e768bdd788af82de91053f73958806e191cb805cc87952ec410476b36","size":1140,"data":"","first_seen":"2024-11-06T11:00:12.656676Z","last_seen":"2026-06-08T21:04:56.108857Z","times_seen":7749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ea013a0b2614f1677a2fefb42d09419b","sha1":"b6e8f7f407c13d36b041a31c22d576a11ba3c0dd","sha256":"179b2a42a28d20d9ce018486c0af107091275d84445f07f766136359723a8bfd","sha512":"d39c7c896f6df52f0a92a76ec0d1441961dd52ce68830fb598f295857c902d47ef7c0e3c181047b70ffe980bf91f20a942cb98b67c8c87e8ddfe193635b4495d","ssdeep":"6144:1aQFXaIRPQk7mISuCmMRJRqWhrEoaiW5hg0tcnuE7NQRRYq2ubiJvmGQ:1/gJDja","tlshash":"a6a441d16dd15824db9142d6cd5d6bc8ebc357984794a8d7b023e2c2eeb09f132f3a82","size":493282,"data":"","first_seen":"2026-01-24T14:10:35.284664Z","last_seen":"2026-01-24T23:14:22.798209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57aabbe2cad6e431005080899932b2b1","sha1":"1f3cfa918bd0bb679845b509a50de3a2a9635736","sha256":"d7fe47f32a8a9a2fc200807e40531d155e49bf91eb6cc24ed664742cf8eec5e0","sha512":"37f03502f981cc20f8a34d2abb18dd0febb3eada50536c0b4ff747554b603ba5623d0c365912c009b1d4d99dd647ef73ac10c51b035f80bae373758396ff270e","ssdeep":"","tlshash":"09e0262f316882336c9713e6cf0e79c4dd10210070268e012035d0da2034c63067263d","size":317,"data":"","first_seen":"2024-09-10T06:22:25Z","last_seen":"2026-06-08T13:56:41.108141Z","times_seen":5343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f775ced7e97cf2f58fd6c9bf9fc5b60d","sha1":"b834f1193f13e2cd3f9247325b73a3673b6757d4","sha256":"5a0aea08ca3c081c7b77e64412cb313be0aff99020034be778420e20c945b038","sha512":"7970b98c78044b69d5576191e7dcfe542d72ff61e8f6529205179b14f4bd14e0eb079132c09b3361605769a9da15a2be9266fab69cda26f1e9965a7c66584b9d","ssdeep":"","tlshash":"39011214380461ff46f650eb98a93994362b2ac0281940b062ea8841b157f1f2d7ffad","size":801,"data":"","first_seen":"2025-11-27T22:48:33.696791Z","last_seen":"2026-06-07T21:08:33.394565Z","times_seen":2414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/gtm.js","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b46872ebd7908c649f763aa50cf2b01","sha1":"941978c524188319566ef7c2c3b5408a2bdf0c47","sha256":"7255999a1c10cb4216b1bd1e21b97f34b7a20ce397a41ce1c2d5366c84a093df","sha512":"0b6735246386e777b0dda775860dd94ecf9a89520d1a765583ffdf385d1a731dd0a31bad1942ef60869c19ef3f3d33758f66839ed7e9ff19da149250cd4023ba","ssdeep":"3072:eXCi05vkzUrnMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQuO7Ud2Gk:SBULt+eUI2X6u0UVWo6O7GQuO7UEGk","tlshash":"226417cdb3d6742243e2a478503f118ba17b68d2f84cc895f186d9d52e70aaa4277f7c","size":322608,"data":"","first_seen":"2026-01-24T14:10:35.240779Z","last_seen":"2026-01-24T23:14:22.780342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"framer.com/edit?framerSiteId=9adad1ebba41bd6ac539f1316b3df8995677576906cfc3fe4d56c85e4b92ebc8\u0026source=www.ghostwareos.com\u0026features=%7B%22editorBarDisableFrameAncestorsSecurity%22%3Afalse%2C%22onPageLocalizationSupport%22%3Afalse%2C%22onPageMoveTool%22%3Afalse%7D\u0026loadStart=1764652960089","fqdn":"framer.com","domain":"framer.com","tld":"com"},"ip":{"addr":"54.240.174.56","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Jun 2025 00:00:00 GMT","end":"Wed, 01 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:72:10:D1:4B:25:0B:A7:E6:DC:96:3B:05:C3:C5:80:49:3F:2B:CB","sha256":"07:21:0D:3E:15:F1:0B:01:C4:EF:77:B5:4D:51:2C:75:2A:9C:29:28:3D:68:AC:26:CF:D4:71:17:F3:28:FD:6F"}}},"request":{"raw":"GET /edit?framerSiteId=9adad1ebba41bd6ac539f1316b3df8995677576906cfc3fe4d56c85e4b92ebc8\u0026source=www.ghostwareos.com\u0026features=%7B%22editorBarDisableFrameAncestorsSecurity%22%3Afalse%2C%22onPageLocalizationSupport%22%3Afalse%2C%22onPageMoveTool%22%3Afalse%7D\u0026loadStart=1764652960089 HTTP/1.1\r\nHost: framer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 895\r\ndate: Sat, 24 Jan 2026 23:11:46 GMT\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=300\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://sentry.io/api/2963040/security/?sentry_key=05dcfd8152434a7385d322f28af36f66; frame-ancestors www.ghostwareos.com\r\ncross-origin-resource-policy: same-origin\r\nlink: \u003chttps://api.framer.com\u003e; rel=preconnect\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"default\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://framer.report-uri.com/a/t/g\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nvia: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 124\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: JYsZ20r2PJDO5iQ4bKRi3K3bnNcPje_CICuJO8XWJOGSMGac2sRC9Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":25,"dns":14,"connect":1,"send":0,"wait":263,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/index.html","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:50 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNUHE%2FZkJnLtoO1iFuqhkkSaPXsAoabEDhDad62XypSTHCKq4FBaGpLunzgMDwDqvy9Uc%2F09O%2FS3jWRWkXBZDHmgoD4wGyuYpEwHjWkz3Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c33393fbaa056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/index.html","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vtmnGptKZ4FzVl%2FrThSSIwMWLrtlYSCC8Hz5QZgMN9vMN0xXme7PfjgMypPug6F2mEJZCMicDfadF2O2C76V4YvVefF%2F3SfwUpiIGgdDjg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c33393c3a7556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/index.html","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BldO%2BIGN%2Fnx%2Bg%2BF4U7eHBGmWjo%2FrIYQe9AoF9OG7YkVOwu3PSTz%2FbDOIpshqgDs%2BcxIqvgknO2Tdo%2FrYnWdBQmRx7Gb8YVYVZ9skp0G0g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c33393c2a6856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/PcY7lBZqqgQ1qiDJIiLqhw2fXhk.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/PcY7lBZqqgQ1qiDJIiLqhw2fXhk.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 605851\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-93e9b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxPcLuU3v5CyJAdfD3lImWCCQZ44prSc%2FHDKraQopEJ0iY58PAVHLf1MnuR1xZ1Zb8qO%2Bcez4DWvQovySO1PChfnm5p8yEDBYRkWVLCXvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a6b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":605851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"47516a20d951e97fba13549b8bfd895d","sha1":"6f004973336dd54f253b0ebc295559afebb4c578","sha256":"86f1b49f8ee3d8cc331a69ee0b973348d462b380fdba9da497296f55145a1019","sha512":"733e6f4e9b55ba7fd7b7faaa2654633b477aa2b43234749e0938ff8429771c783a102eca11558adc419ef6cfc55bb85fbd91f7ada8dfc9854a0a57ca99ae5769","ssdeep":"12288:sAOJg508by0AWTbFxEFCo6y7ysgDC+pHKGqiyc8THY8VRTiNk+jEw+M:tOJQAo47ysnkqGqPLLXVRqZEw+M","tlshash":"c6d42375feacded2dc1fd27486d9c7ab292bc2580340ae2718580988156ceb60d44fef","first_seen":"2026-01-24T14:10:35.280587Z","last_seen":"2026-01-24T23:14:22.767181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/bMedkSKL4rurKKVDIVDKoGpQA.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/bMedkSKL4rurKKVDIVDKoGpQA.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 188388\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-2dfe4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTuwfEVbdGpMjfPL6umSKVxZtwOUJotKl3WnQ0iEq1Mb77p7mVW7p6zo6ZNphkQOh0UQH4S0flND62MJabJx8kYYSEc1SOPlO4kUiMy8cA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a6e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"2448bf7b49e01f83643a125fd2f45eea","sha1":"cf2e98ad77e6345b554e4978d0c33a276912b159","sha256":"cf09fd18c3fb97295c517f66c753ef40e97b0a6b57a82bff73ada76efd4c7d67","sha512":"b43f03004e3d32a6309b4164ccb9926ed0e8c649d404d95c835a2618de2c11ca59aae60552cd4d7928a36c36ab9cfb1abc33cea808f0c2be84dd1d9a9116ddb7","ssdeep":"3072:UzkbNUfux/XpEliHsRhKTnYkA/tVbHsu869vHvWqrZcW0r4wp4QB+8PPhnRsu12s:/bNKmXpEPKTnY7Vj5/3rZkD4CVnhR12s","tlshash":"130412c89c253c94835e9b41668ae778bdf20b67b360173e4acabf605c3f2091195f67","first_seen":"2026-01-24T14:10:35.275304Z","last_seen":"2026-01-24T23:14:22.76903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/GS3az0GxtbhBNvMhc4TvoThK8.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/GS3az0GxtbhBNvMhc4TvoThK8.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 509808\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-7c770\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQRiBxKQksoyR2uV%2F7ttfZciOMHBsXzj%2FUbDb5Oulc81kd2SzfQBIz7xZqYjT0Fe3HztvbbLXa4sAzZaIdgb1NbB6trzRNYeVyPaW6CTag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a6c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit colormap, non-interlaced","md5":"b20bc6d89b4b669f69858c8360e3c48a","sha1":"cc4be4dbb93fcc08a5be99be8440d984a0b56b45","sha256":"237d9b169c0a9e8fa04f8d26f2d3206cb9e6e28a181a0d17f9ed2b54433dfc26","sha512":"6ca5ba5e53b18eae92a922dbf97375978899b213d4c8b16042c72a3ad0fcc3efafbd8d3e0471a9f75447bcb08fb1f48e715f09edd854c34dbdf2f4cf3274e73b","ssdeep":"12288:mwejaZEOrzPBKdNyFCSNQFnKjj2BZqTtwhRMxoNDtFuPAklDaZ5:m92OWz5myF31qBZDioN5FuPdaZ5","tlshash":"fbb42389c6fe5cb0cbeeeb721bdf194d90630959cc7d320b0a7581567536710acaa38e","first_seen":"2026-01-24T14:10:35.282022Z","last_seen":"2026-01-24T23:14:22.770336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/rR6HYXBrMmX4cRpXfXUOvpvpB0.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/rR6HYXBrMmX4cRpXfXUOvpvpB0.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 22927\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-598f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJm8zvWMK3f%2FM4EIg2q6Ud6D08EU%2FrRbB7nyX02W0xdwoLuBpY%2Bo0%2FDll3SV0oeAMtYE3m9mSmrHa%2FJ6QtLr0b%2BfGa%2B2FHTFnQ1CrSKe7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393feaa656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 4-bit colormap, non-interlaced","md5":"9fc151d4056f88b1dddf17b0d20dff98","sha1":"ad1e8761706b3265f8711a577d750ebe9be9f81d","sha256":"7867172cbddd0172eb2fcf5803679ab8fb337eddb8397d43c918788016181409","sha512":"217913268949e724350b7b44fdcb602b6db185fd5627b3842e27b27fc01ce3114456be935a0c45de5d5065cdf70a23a5649f9da6b567420408594efa520e7733","ssdeep":"384:rzcwAvBtD1DMgAwG4kaKgwrjNZTRdnFr2E+4oYBMWgiqgEun0iauV4YF:PcZlMgvoBdnFr2EDzffNr46","tlshash":"67a2f1c18b99b12fce45b394ed5bfcac5e1ec242e496eb8b62f0d7a70654b640c08818","first_seen":"2023-12-05T03:15:37Z","last_seen":"2026-06-08T13:56:41.09534Z","times_seen":100,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/cMktGXDxcTqee46bqFBlSsBxGJc.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/cMktGXDxcTqee46bqFBlSsBxGJc.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\nage: 2358007\r\ntiming-allow-origin: *\r\ndate: Sun, 28 Dec 2025 16:13:43 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-69515734-45667f937b48216442cd1cac;Parent=0f848cc05cd91af7;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: 95d199df-9162-4964-b71d-ede849e10dc1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"ab6068ebdce1e7cc9ff193a7f2690218\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN52-P1\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"BsLyxctnZBmMocGObn6cVp5vtu_Q1rGCNTgNdVq_gzZEYuCpdrgfKQ==\",cdn-downstream-fbl;dur=4\r\nx-amz-cf-id: BsLyxctnZBmMocGObn6cVp5vtu_Q1rGCNTgNdVq_gzZEYuCpdrgfKQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":285894,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ab6068ebdce1e7cc9ff193a7f2690218","sha1":"8b3f91706da5aecc94d40a5f848c6e6ae9454ce0","sha256":"a6e0b1bc768207cddbdc17c18313c35e85897d74cecd2388e1f15048f1843778","sha512":"351f714e5809b672d5ca3dd595e5f023a924b920ada1e130172934c47b518779633748bcd14e0eb5d2436d5984765be0c02f353590aae8e9740801c686fc4ff2","ssdeep":"6144:+hgs92PQ8VDD+PWN6f+X6d8LsHoWju+2f3U+uzlg84B:2gsUPXVnjN6f+qVVu+E3Uc","tlshash":"9a542334863056f79a7d67ec42436d3b48fd36f4a6834980673c90eea85a3f1885f293","first_seen":"2025-11-02T12:38:36.927415Z","last_seen":"2026-02-14T03:00:16.724558Z","times_seen":8,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/en_US/fbevents.js","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /en_US/fbevents.js HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-5133e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2xYxwSjnQWKe0xBZuDo3ethC0rKvp83UVyK2B6dGRCAext0jsLc%2BkrFgQVtcAQNoJUTVx%2FfsOgHxCxZI6kakScP7VyBbtSOJIvCUUX5yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33393c2a6656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":332606,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10339)","md5":"9eaec47aa43bbb0a628aea8391fb197e","sha1":"52a4da7c3a850bcb113b7ad37c13f0bfed0d2488","sha256":"e58972f14e60ff958243af170ac82cb4075e26c8c252caf713b47c9872b5285c","sha512":"692182417b4530683ab419419066bfecc5db24e324a9451204be63464a1ac5daa0b2e14c49eef2a989640c6572260ac05dfbf323dcd16f1b5f652a22edf38588","ssdeep":"6144:m6LeuaAnE5TrbEJQbTaaGepGdX+IOXw6K7a3ZY/ncQZF7:7qaR9J7","tlshash":"e264b98975d1b09247b678ac526f4007b1bb99e6b0c8c930d59dedc43e788ed5033faa","first_seen":"2025-11-21T04:35:59.326196Z","last_seen":"2026-02-17T07:28:25.642204Z","times_seen":813,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/babylonjs.polyfill.esm.js","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /babylonjs.polyfill.esm.js HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-7a13f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xl29kX0SSB%2Bkc%2BkdCRLoUAAgMnYiMqqboC9q8bIFergORK%2FHOZbCacWBWX%2BScnC5B5%2FQIDuDCize%2FNBCX7Kxxq%2Fn5E6Z5H%2FUJjXkOmf7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33393c2a6956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65534)","md5":"325fd95a580bda0b044cea80220c0f07","sha1":"39eeb051f27207b37f95203813135d05a921f498","sha256":"178fc65cc4d64de0a808c47e5682171188112b23980e1ee3f11616dcd228f620","sha512":"d8de0ac365ac6c4c1102a52fa8e3947b65075eb0c1a1badf9cb811bb15c0b57b031d2b498332d5fb76837368a0c93bc07480619c68702973dea409acf63ac975","ssdeep":"6144:mQVwMgv/QIhJ607eISuCmMhhPWElrEoac0rhg0hAlmErN+Bycmu9S1vmeN:mQ0XShHZt","tlshash":"a5b441d12cd15824db9542d6cd9d7bc8ebc357944690a8dbb023e1c6eeb49f132f2a83","first_seen":"2026-01-24T14:10:35.247559Z","last_seen":"2026-01-24T23:14:22.774488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/T8gphXM8jKmeE7PKuqLFpk1Hq0.jpg","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/T8gphXM8jKmeE7PKuqLFpk1Hq0.jpg HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 262930\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-40312\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg2kyvGF%2F9663BUvzoGU%2F%2F6yMyuUcczqn8lj3JKdZCotmDvpa7XvpaBeW6lRDLz1GLa7obzAa6dlU%2Fs8ePFJgMpMNqdP%2BzrWUY01OzO9BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a6a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262930,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 2240x1340, components 3","md5":"5ffee6043a4963117512506bfbdd3fba","sha1":"e3715cef8b7b417c2d8d5ae373a7c2524ee641fc","sha256":"be2b4333811d8fd99755f4594ca4d2daf54dbeff5829bcba83f8d60cfdf622e5","sha512":"4b90ca96fea77b7910a515a6f4686b94daf55c2e0844871d08ac2439afe4734154a35fda18caff517baf913a351426a99b9ffbfb192bfb3ae69a29023e1661bd","ssdeep":"3072:JKVRyKmIwpxBgVapn4Glu0OlHobOb2mIJ2zJ9VyLBMhGEc1aBha98nnljNd1Jk0G:JAyTR4GIRobopEuri9Q9Nd1+kMf","tlshash":"62440191360526ecf6190b712d030ae28705ed652bfa6883ce54e8a8fe1fdf795590cf","first_seen":"2026-01-24T14:10:35.250922Z","last_seen":"2026-01-24T23:14:22.775566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/assets/c8w7CneVHd3JrQ82kT1GgU0ykk8.woff2","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /assets/c8w7CneVHd3JrQ82kT1GgU0ykk8.woff2 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rewards-ghost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: font/woff2\r\ncontent-length: 18072\r\ndate: Thu, 23 Oct 2025 17:38:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 22 Jul 2024 01:00:50 GMT\r\netag: \"efaa3c96836e9101a8d0ac5f9a227bc1\"\r\naccept-ranges: bytes\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 0\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: U5Lmm4W1nuRkbLhDjTbEbJWsV1oJfgVRM3CHMwffnG1QErgFzpseWQ==\r\nage: 8055321\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN52-P1\",cdn-rid;desc=\"U5Lmm4W1nuRkbLhDjTbEbJWsV1oJfgVRM3CHMwffnG1QErgFzpseWQ==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18072,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18072, version 1.0","md5":"98ef8c7ce122a95758b79f2c9822a07f","sha1":"73cc3b0a77951dddc9ad0f36913d46814d32924f","sha256":"9e0f90691a35306d824fb5d7f74eb19105ffa5724c4e787c3421d85742d4f9d1","sha512":"87c43d429313f83977ce69ae68efd0494e1a8aedea224fb6ed59c3abbd929a9e26d8ba3cbb2e8424f591fc0b72f00897221871a7805bde932da1db68d332ca77","ssdeep":"384:eNuDMIbYPb12J/8NULIPaxbpBC8P43eQKO1cT3JIujLX8ZVgSa048MQ:n/wR68NUEc9BT4sUYJ3r8Tg048","tlshash":"9d82e128c608b38dc90286b6a769d83859c0d7d6f1f397d5f6b1907c63ceb060c9cae1","first_seen":"2025-11-02T12:38:36.948116Z","last_seen":"2026-02-14T03:00:16.721066Z","times_seen":8,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":48,"dns":8,"connect":9,"send":0,"wait":16,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/assets/SajTDCMj5eavKMmcDFtUzk30Y.woff2","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /assets/SajTDCMj5eavKMmcDFtUzk30Y.woff2 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rewards-ghost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: font/woff2\r\ncontent-length: 18112\r\ndate: Thu, 23 Oct 2025 17:38:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 22 Jul 2024 01:00:44 GMT\r\netag: \"d006348b136b2f2f2a2f6f367bb1af50\"\r\naccept-ranges: bytes\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 0\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: e0v2881dorg_Z_TsvWqdDMHyyyW6btBzihrpyyF-rpd5Ej29gz78vg==\r\nage: 8055321\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN52-P1\",cdn-rid;desc=\"e0v2881dorg_Z_TsvWqdDMHyyyW6btBzihrpyyF-rpd5Ej29gz78vg==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18112,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18112, version 1.0","md5":"37dc7f316017aade5738404806aad3e9","sha1":"4be6a34c308c8f979abca32670316d53ece4df46","sha256":"c7eb6d4aedf04f12702b2fbdce95e5fe6bf12e850306ab36bacea44acf73a50f","sha512":"3c015f2af60185ee1049c657f84f2a29eccba291f98ac47b2da4c5e7c64f93be03a1a3ab5409d6a254a9f94925ca87a0394372fde552f20edfbe9382ef623eef","ssdeep":"384:Cm85Tm2gxWbpRKjFaMDAi2nAvBExUdfcTw+DHKqU9ZZus2cm9LNysE9eN:Cz5TdgSpRKoMDqnuBEWcTw+DHKqU9ZZM","tlshash":"c382cf4f41014990ff3e857bedd86fe18142a3f65eb235b380a56fb8816643ce12d41b","first_seen":"2025-11-02T12:38:36.934757Z","last_seen":"2026-02-14T03:00:16.722311Z","times_seen":8,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/assets/uFiGgObQpvyNG7tPLZwS2fGRNvE.woff2","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /assets/uFiGgObQpvyNG7tPLZwS2fGRNvE.woff2 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rewards-ghost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: font/woff2\r\ncontent-length: 17992\r\ndate: Tue, 23 Dec 2025 21:04:57 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 22 Jul 2024 01:00:49 GMT\r\netag: \"2be704a733a4f503039b0690e1a3e445\"\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Y93YBJBwmTJka11btuT-AyOC6itD0B8xPuPUffOyzDHzcGFykk-JOQ==\r\nage: 2772534\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN52-P1\",cdn-rid;desc=\"Y93YBJBwmTJka11btuT-AyOC6itD0B8xPuPUffOyzDHzcGFykk-JOQ==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17992, version 1.0","md5":"a552dd7a7adfe484601e158a9add2429","sha1":"b8588680e6d0a6fc8d1bbb4f2d9c12d9f19136f1","sha256":"b06a247b54e6da779768a0890b0f87a15b2e56d67eaaa10559562cc51ff82e06","sha512":"3983097311e4de851b93d50b2fc4aabaa96f5d46b047c6865f323265cf8e2a087ba50d793ea8d31336d61104bfcca221df3842c83d3e5d546372de14a1dbabc4","ssdeep":"384:Eh/q8SvIE+IhCoy4M9A3TMVSm0BI5nGcY7ObjhfzE/WEMUxXhkGxThZUsy3Pg+rL:Qq8OIE+Icoy4MAwVSmpSObjhfbOrZUsK","tlshash":"9882cf5fc372de9cdb4d10209981b670adb81b1f4ee306af840b2a996261438333b17f","first_seen":"2025-11-02T12:38:36.942797Z","last_seen":"2026-02-14T03:00:16.716051Z","times_seen":8,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/Blba5DUkbbqHANGsSU5vKLckyFA.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/Blba5DUkbbqHANGsSU5vKLckyFA.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\nage: 4455971\r\ntiming-allow-origin: *\r\ndate: Thu, 04 Dec 2025 09:27:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-6931540a-2a7e29e817d118f4660b9d11;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: ecb9243b-2610-4d0c-9c13-102c8ebb2695\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"d700680d0858574303698cafc3a78674\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN52-P1\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"YC7USdMZA08GVE_RkC-Y7nok6gkEdnN_jGvdz9ANMA31H3gpUONpmA==\",cdn-downstream-fbl;dur=3\r\nx-amz-cf-id: YC7USdMZA08GVE_RkC-Y7nok6gkEdnN_jGvdz9ANMA31H3gpUONpmA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":26054,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d700680d0858574303698cafc3a78674","sha1":"c3fb36d5966a8a8611655fdf4c48deb419ce27a9","sha256":"015c9b7781cea7ee9b04a22cfd686059fb8d17d0fc35321bc371af4028dce74c","sha512":"f91eb3c5703ef314141eacca003dab429669af2a11c026ada47fca610be5dcd781456079503cf164c8a163ce76ed5cf52d64d01536b60585634d0107a313374b","ssdeep":"384:rPkb2M+nhIxHmmvx0eSqorv4epphBsSxvO3Gbta3HyE8cfHXTtS0dr8VG:Ab2M+nhiGY0pv4uyS02ZQCODQ0RSG","tlshash":"70c2e009cfed792fdc89523162b223dc04d3dddc0b3a026bd496e07a5263795d42682a","first_seen":"2025-11-02T12:38:36.940153Z","last_seen":"2026-02-14T03:00:16.725443Z","times_seen":8,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/gtm.js","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /gtm.js HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-4ec30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBHZSrgm6NaoLtiamUYnx0WnIgMjxsCnuVnQyWxxe6b4%2BGhdEiEWhIp9OqBnorQzv9la42yereoUB%2BIiTf9Yuu4phqqUm%2F4vxbWI%2BhrbJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33393c2a6756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322608,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5372)","md5":"1b46872ebd7908c649f763aa50cf2b01","sha1":"941978c524188319566ef7c2c3b5408a2bdf0c47","sha256":"7255999a1c10cb4216b1bd1e21b97f34b7a20ce397a41ce1c2d5366c84a093df","sha512":"0b6735246386e777b0dda775860dd94ecf9a89520d1a765583ffdf385d1a731dd0a31bad1942ef60869c19ef3f3d33758f66839ed7e9ff19da149250cd4023ba","ssdeep":"3072:eXCi05vkzUrnMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQuO7Ud2Gk:SBULt+eUI2X6u0UVWo6O7GQuO7UEGk","tlshash":"226417cdb3d6742243e2a478503f118ba17b68d2f84cc895f186d9d52e70aaa4277f7c","first_seen":"2026-01-24T14:10:35.240779Z","last_seen":"2026-01-24T23:14:22.780342Z","times_seen":2,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/ZeIquGN0lgZpAXALJtpvD7e7A8.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/ZeIquGN0lgZpAXALJtpvD7e7A8.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 129947\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-1fb9b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOGfK33V6QD4wngpR7JxiDS4Y2I6b49A3DBjds8DU6tpNdy7z8jcK5XZKxnkDnIEIpnOLtE20LB%2B4vBwYrXn%2F5UU5HydfrtpT8obPZ6unA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a7356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"dcebcc08dfb79b784b9f3ac899472363","sha1":"cf03e5ba168959ed2f0e0d7f2015e58f037450b9","sha256":"ab1ba8d4ddd43334ee04a594e095a5a5af7c16795b7fd30598e760f1dfac5508","sha512":"7797e72a528df8bf09b5838e299ab36f7383fb9183a6fe4e162a5467f07c0c2ee7df0cfb2612b98cf0be51411491fac6c5524a0987c0676c4eac675819bbb74d","ssdeep":"3072:ETDMZMaWAkl/QfwKUjBNowdl/xxnAy6ICrEqGQ:KDAMJzdHos3Ay6I6EVQ","tlshash":"54c31283075a0a13879332f33e2a92c7a922d85bd55ac65be1e0d7f4eb1e540e74b712","first_seen":"2026-01-24T14:10:35.269919Z","last_seen":"2026-01-24T23:14:22.781442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-52VVCCDCM2\u0026cx=c\u0026gtm=4e61m0h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:14 GMT","end":"Mon, 23 Mar 2026 19:51:13 GMT"},"fingerprint":{"sha1":"3C:DC:21:26:F8:7A:33:10:B4:84:83:99:1D:39:5F:67:F9:30:F2:0D","sha256":"7E:B2:4C:28:28:AF:14:76:E2:EF:78:6A:09:B9:6E:FA:C5:87:B4:75:A2:86:A8:E1:C7:BD:AE:A1:73:A6:D6:5D"}}},"request":{"raw":"GET /gtag/js?id=G-52VVCCDCM2\u0026cx=c\u0026gtm=4e61m0h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\nexpires: Sat, 24 Jan 2026 23:13:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160122\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499657,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d57d8826c2493fd9323b40d255f6d938","sha1":"cdb8fb5a8a14bc8e7358791ea95b821495014422","sha256":"24b75caf48a9b6ebdf5b3c0f198a37da540136e3e7fd82e2bbf68a4f810d7b6e","sha512":"ab175fca276e4db623288d0701a9929f62c8bc2d4d6f72edea0ded00ade0fdeec18eb4244bbed5b7dab0140677513bdcb4d38db7cbcb903eff223897926d9c91","ssdeep":"6144:zKeJmMvkbBQAxJ508XYoeXDZItDmlFldbKKCYTdqw0N4JBxXS:zxmM8bBQAxJ508XYPZItD4dqeS","tlshash":"68b419ce73d63426979af478502f02cba87b25a2b45dc8aab1c9ccf01d3459b4167f78","first_seen":"2026-01-24T23:14:22.78288Z","last_seen":"2026-01-24T23:14:22.78288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":46,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/pd9ABUBarCE4beqs6U123yaw7Q.svg","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/pd9ABUBarCE4beqs6U123yaw7Q.svg HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:50 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"692e915c-af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4cT6ojC8gArWRXeGWSLyFJtk2HfOvFAWd6z5sr927G1HvwHIAI3wgMzb%2BoVW51vOe8P9RIMC75R7RQODMi14ZY4sOXy%2BsX8Y8%2BSQzPZgw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c33393fdaa556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21afe8b3fee948dbfafdb0326c4419f4","sha1":"a5df4005405aac213fe1b7aab3a535db7c9ac3b4","sha256":"ea98475967214af37d6d88f32bc6748eba1c48dbd40829e241bbde0aae8afdfc","sha512":"1d1ef5ec759e140490f31ef2519001b4ea51e75c3afc41e3827517293f635cf67b7a2cfcb12ab22705492cfe915669ade5363636b99049cf5cd24355ca6d1ea9","ssdeep":"","tlshash":"3fc0805d530c4d1cb9114d11eb7c7251111311524488105ce9b52139e20184d34375e9","first_seen":"2025-11-02T12:38:36.963525Z","last_seen":"2026-02-14T03:00:16.713303Z","times_seen":8,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T23:13:49.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MduBlphf0f3OaYU5B6D8WJsFdm60S16oZ7WCHNFI9J1Q30AWBgZGL%2F0%2BXyDiJenX%2FSquPh77%2BNtJ%2BVOh0mANsXqLUFIibadVgm0sVQh%2F4OLE\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c33393a0d11120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":375801,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59300), with CRLF line terminators","md5":"b259ff2cdc6c3921fdf8bcee3e429725","sha1":"79918398dec6376718a77935d6407f8e3e165254","sha256":"402b68ee90a6611fdcc40175127837e8b8d5b3ac8c2d98dc4f6adccc9c30d2ee","sha512":"0144984d2ade38e3711f4998f01ad9f6ab4f3cb625e715d6199019bba71977e2dfb774c084e7aa0d095fa3b18fb2837b49921324936baa3c0d70f46407356e91","ssdeep":"1536:rGzVJVMaj5eHCe+FVHeckVJV4aL9VFaTVhVk9VCwPuBPaQOsSvUuQy+fU3ityJau:rQxEuBPaQOqqIRCCZOKi5Ae","tlshash":"568497336211e53a4cd316ede364960c3a6a9205ff338587a7e9a17f62c9df426113bc","first_seen":"2026-01-24T14:10:35.278805Z","last_seen":"2026-01-24T23:14:22.785274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":23,"dns":8,"connect":1,"send":0,"wait":205,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/index.html","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzcGWtiXLQetcQiXlZsa9bWEoHV%2B1Oud8WO%2BqB1A8wmBaFt88D9V3jcYSLJvTkCUWmiMoNXEk8%2FqGZT0Ym%2FN0j%2FHDl36QTylnAPbyM7oiQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c33393c2a6556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com//secureproxy?s=%2Fjmpd%2F","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:51.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-ghost.com/\r\ncontent-type: application/json\r\nContent-Length: 2201\r\nOrigin: https://rewards-ghost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_52VVCCDCM2=GS2.1.s1769296430$o1$g0$t1769296430$j60$l0$h0; _ga=GA1.1.1214239529.1769296430\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2201,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 505 HTTP Version Unsupported\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:52 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 26\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"1a-upO6eNGXiLH/etOGU8Z4TSsCvOM\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769296491930\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 505\r\ncdn-cachedat: 01/24/2026 23:13:52\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 88f8d07d39eec9b9c23f83f76f18b1aa\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jHZ%2FSDcd89v1PpOiDtSgBZYme1T%2FRIop0E8RzdAYDXhZZIudH6HKME3LRYEcvwhyQSRW9UIfsXVwzya5mDC8xYuDaz%2B6zUufNPpUjbDKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c33394b2ba556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"505","status_text":"HTTP Version Unsupported","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1d861534f29a609e5868484697373f4b","sha1":"ba93ba78d19788b1ff7ad38653c6784d2b02bce3","sha256":"eda8600220617deb22dfaeb6cfe8c1a2105750566704e7a3102489717d53f99a","sha512":"b62eb914bda78f0e733909f1bec747354cdc97209a44cb2daba63485c3481cbc7b3ee82fbcfc5a30e129ea109f804088bf28e622cc6ff8f1cd15328e3deaed3b","ssdeep":"","tlshash":"3180003c20202220200002822200022222e022b200200208802082b202000ac83af338","first_seen":"2026-01-24T13:38:56.240906Z","last_seen":"2026-06-06T10:34:57.162465Z","times_seen":210,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/66Inw0mXZtgfzTReTwIxCFuofU.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/66Inw0mXZtgfzTReTwIxCFuofU.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 342585\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-53a39\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yF8alAB2dmKg4pBhNUwnJebCE5cUVXRe4DAv76dhjjy%2Ba3VP1ho1QGRNAASae8vNE2whORcYOhB4ds6Al2P8EtBQqHK%2FM7MasoJtEw3kBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a7456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 2080, 8-bit colormap, non-interlaced","md5":"8c45069bd0f041a139d05efc5e61049d","sha1":"1ce018af5207f6f8f59ca89e9bc6f2694f453ac1","sha256":"c5d37fd8c813e5bd96b0ae54dd5b033469b4b3cba3562cc2399391e23d58262f","sha512":"f4625ed2a63eef0c0129a8e5238e264124a5fd8b1f39c297712a7a7382970946cfd74c5979e467ae1285475b1e0b6ab4f30e41205d412cb37e0f7d4ac9b5065b","ssdeep":"6144:y+HHbF3NkxcDVXCNxFYRtUFp49Xy+Ld+BQ2BSArVqkbfwbHfDaD0mTdhWEDL28:tnbFexGVajYRtUfgjLdoZAsbfwb/D+0W","tlshash":"dd7423e6b58fd8a6eb8f34bd72478a06e86ca40034dff05502917f799db809d91512ce","first_seen":"2026-01-24T14:10:35.264493Z","last_seen":"2026-01-24T23:14:22.78727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/index.html","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:50 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGI2hp407j2JkHLBMJhwWf8OYKbAkgCO1cfvzlxN8RA%2BlPlf1fmmNpFOUcJNXc0CMAULXY9Tq66padoBaXqtyUTEclU86MRjAUKWppEkPQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c33393f8a9c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fchakra-ui.optimized.js%3Ft%3D29488273%26u%3Dw5WvIosqh3Ohri24GDY5MjY3ZTU0ZTZhZDExYWUwYWQxMWI3NtrxoEV1E8p40w4KXw","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fchakra-ui.optimized.js%3Ft%3D29488273%26u%3Dw5WvIosqh3Ohri24GDY5MjY3ZTU0ZTZhZDExYWUwYWQxMWI3NtrxoEV1E8p40w4KXw HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nCookie: _ga_52VVCCDCM2=GS2.1.s1769296430$o1$g0$t1769296430$j60$l0$h0; _ga=GA1.1.1214239529.1769296430\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: no-store, must-revalidate, no-cache\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=chakra-ui.optimized.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 23:13:50\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 79dbc8d52b66b83fb432f7152961cf3f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eb%2FzS6MyckzKxbcvVIla%2BtNQQeQAEnFqxh4n2L%2BsDGBSXLikx9CPUpQosZRBNk6o6d9H75ohck5pDNvnbP5A8DWNrNnCz45SmZnWeGva1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3339433ac156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-08T13:18:27.600009Z","times_seen":2556,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":554,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/eD4xV3ZrL8NVu10xp9oJnwYAeMI.png","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/eD4xV3ZrL8NVu10xp9oJnwYAeMI.png HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 143845\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-231e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrLjqmbVEGx0JtoxpCOLrYaJbg8YRp3HxFlXgsMJFOmxQD%2BA%2FrOa%2FTLmHYxxi18XuGWSxPFHJOjB2xLpkRsiqI3HmrdwGasWNu5ryHo%2Bbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a6f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"30ae4df9b3f06378c9ab6f4ffeca477b","sha1":"e6b93a3676de098000a815b880c0d24e31d81c12","sha256":"c0a579209d1da7c0ff77ec2dfa7bc8ba2ed9027669d3419db4a8b65d1be477dd","sha512":"5171bcabc08a957c2ae2b7870581f0659ecae668cbf3dff39f67a017f7b169cb29f144e4035da4f2fa0be4deafca076f0749b23099d06b56657f38443c8dbb27","ssdeep":"3072:RvEv2auLilbWVYF+r0MIs2vEJqy5rAyaXezmCEuzXDn:RvkPJWVQU0MB2sJPcns+u/n","tlshash":"25e31201ed73f27c6a6b66bc060fcb43e90605cd07c8584a08dedfd661e7e868e87126","first_seen":"2026-01-24T14:10:35.253268Z","last_seen":"2026-01-24T23:14:22.789595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-K6886SW5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:14 GMT","end":"Mon, 23 Mar 2026 19:51:13 GMT"},"fingerprint":{"sha1":"3C:DC:21:26:F8:7A:33:10:B4:84:83:99:1D:39:5F:67:F9:30:F2:0D","sha256":"7E:B2:4C:28:28:AF:14:76:E2:EF:78:6A:09:B9:6E:FA:C5:87:B4:75:A2:86:A8:E1:C7:BD:AE:A1:73:A6:D6:5D"}}},"request":{"raw":"GET /gtm.js?id=GTM-K6886SW5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\nexpires: Sat, 24 Jan 2026 23:13:49 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 24 Jan 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 110514\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323817,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"7776695bb68c0eb84d81b1727a1c9a91","sha1":"1638865cfa37714529b2fc00e5da6a64bf7ba206","sha256":"64b44ac9bf7f42100e4884cb6cf5cac15906490d9724c43887f0a26e697ec137","sha512":"fcb4d7d6d646178194a4db2ad87d79bb9309799d954db9f111cdaa774b244fa1dc37cda6136b2581dae45399fd56a30b3320f33d0e18760d3e7e38458a9cfc5b","ssdeep":"6144:RJmMvPHQAxJ508RYoeWQlFldbKKCYvdqNtX2:fmMnHQAxJ508RYaudqP2","tlshash":"be6418cdb3d6702693a3a478503f118bb17b6992f84cc899f185d8d42e70aaa4137f7c","first_seen":"2026-01-24T23:14:22.790902Z","last_seen":"2026-01-24T23:14:22.790902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":110,"dns":1,"connect":15,"send":0,"wait":48,"receive":59,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/assets/59q93UoZRANOSFFiKrbmBnys8JI.woff2","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"65.9.46.36","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:50.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /assets/59q93UoZRANOSFFiKrbmBnys8JI.woff2 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rewards-ghost.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: font/woff2\r\ncontent-length: 18104\r\ndate: Thu, 23 Oct 2025 17:38:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 22 Jul 2024 01:00:51 GMT\r\netag: \"bcf220c7d732eaf0d7e4c74623646db6\"\r\naccept-ranges: bytes\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 0\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: hY7lr5HKxHiNxtxE_3kZF7hxJ_iUAjpDMXiLi8aNSPaYDu8fvt7JiQ==\r\nage: 8055321\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN52-P1\",cdn-rid;desc=\"hY7lr5HKxHiNxtxE_3kZF7hxJ_iUAjpDMXiLi8aNSPaYDu8fvt7JiQ==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18104,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18104, version 1.0","md5":"9c040d16e7cdee469d6d15c831ebfae7","sha1":"e7dabddd4a1944034e4851622ab6e6067cacf092","sha256":"4fd222351909d6311aa86516d527d1b5297c44130cec478a1d3b649d352de128","sha512":"5afacd107f6e88f4fff5ecc884a21af78dcf7b61613ed1c3337d8dc0d7b6df24017a7c281eb553d13c46227cce7919f59632f57a3ee26caae5eb4fba4b410531","ssdeep":"384:tZ95ckaehmPtvdrYsAjoTjPWtDsWMAK6Q5YXI9xaPMo5+0aM:tHoehqtvdrTQoXWGWMrh5c1Y01","tlshash":"6d82c0c62ffb43e1a6860937d500a718dc2c6c26ca9131a34ac9f03ed5b36216739e35","first_seen":"2025-11-02T12:38:36.932647Z","last_seen":"2026-02-14T03:00:16.708474Z","times_seen":8,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":42,"dns":12,"connect":10,"send":0,"wait":14,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/images/1ghUqZndoZKojw0BsnyRgQt9YnU.jpg","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /images/1ghUqZndoZKojw0BsnyRgQt9YnU.jpg HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-ghost.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77794\r\ncast-mode: default\r\nlast-modified: Tue, 02 Dec 2025 07:12:28 GMT\r\netag: \"692e915c-12fe2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPoIBvnfe6ZP5e8b8sJLhxBULMHZBmsPDC75sdzhDICLe7OzG3gfonL7qSbF%2BRGCBED8sKSiSbAzc4sIasPdWTx8eXElgrwCVFSxA4%2FTrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c33393c3a6d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 2880x2080, components 3","md5":"741693e46619613e0e4528d22635c9a2","sha1":"86b40e14aeec2e8924ec1a9be3317c024f15bc33","sha256":"1df623e8b9e48847a3921ed16bf8f95bd9d593faccdbd3113fd3fe07caf33479","sha512":"6b1e844478c955e9db4b6a3c1beff2439d1ba96ffbb2af5ae0dd403968d6a001e9c7bdf24eb30d87740ad4e2382acf435be2a4bdbe0f87e37ee64c07186442c1","ssdeep":"1536:OUd9FbMNg93FZQ/VSoijtyCqk3KheAKIjduWCJ7nREl5J:ZFMNg936Vctmka5duWCk3","tlshash":"c6736b7a7f9a4a66c56887f3c987273d3e616da2cdd8120f8ec40d3630a5764ad0e5c3","first_seen":"2026-01-24T14:10:35.228018Z","last_seen":"2026-01-24T23:14:22.793088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-ghost.com/secureproxy?e=ping_proxy","fqdn":"rewards-ghost.com","domain":"rewards-ghost.com","tld":"com"},"ip":{"addr":"172.67.198.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-ghost.com/","date":"2026-01-24T23:13:49.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-ghost.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 01:59:54 GMT","end":"Sun, 01 Mar 2026 02:58:19 GMT"},"fingerprint":{"sha1":"4A:E4:B3:41:09:6F:D7:C9:9A:E3:AF:B8:E7:01:3C:CE:A2:CF:C6:F2","sha256":"B3:F3:24:8B:37:D2:FE:B7:13:97:FB:E5:16:20:83:19:E4:29:D7:6F:34:46:E9:B5:F5:1D:D0:95:1F:0C:0E:9F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: rewards-ghost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rewards-ghost.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 23:13:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weKYvhfY1rbYUNH0bhTlEoVbn1qAgEyQH0EuK9QNx6J2U65hcTBb2TRZunAb7lNG4nSHbzion%2FiCKrDb2AG2Fzp3sDWWoGL2tS60VYp4Kw%3D%3D\"}]}\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c33393f7a9856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-08T13:09:33.777887Z","times_seen":8784,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}