{"report_id":"688d5fdd-cfdf-4032-9705-7d3394d38b6e","version":0,"status":"done","tags":[],"date":"2026-06-28T12:30:25Z","url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"title":"three.ws — The 3D Agent Layer of the Internet","dom":{"size":3514452,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28000)","md5":"4bc4e4a61d355753b489a3548602f56a","sha1":"d64c840442b4a85775a7d92c72e4aa7018c28ea3","sha256":"2b2c3a53fafbbf120f15db9e9e337ceae048959a725e9566135f225a7af5631a","sha512":"ca17aae2e99f7895d033d03d58c19a8b6a6bab391614938950ebf7edffd69e731779deee3d170fdbd870b5d7738d182e3af7f92706a7019de1f142ee58a41502","ssdeep":"49152:rPwEsMZFEsOPmEs4dDEsWnUEsqiDf/DzifcXkRfJT1Qf2XSmpAEJ3+Bdp+W:Y","tlshash":"bbf5f1765a0d2a2f33628d9ed356273e3e8a259ff50440df6adf34e9c7cd8501222da4","dom_hash":"domhash83f3caf32bb7e1083657c5840640f9b6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T12:30:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"backend-main-proud-frost-1362.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claims-three.ws","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-28T12:30:36.168716Z","last_seen":"2026-06-28T12:30:36.168716Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jup.ag","ip":{"addr":"172.64.144.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-15","domain_rank":15908,"first_seen":"2021-09-16T09:17:02Z","last_seen":"2026-06-28T03:35:09.305825Z","alert_count":0,"request_count":1,"received_data":16143,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":745233,"sent_data":5393,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-06-21T19:35:23.467571Z","alert_count":0,"request_count":3,"received_data":6488262,"sent_data":1698,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"backend-main-proud-frost-1362.fly.dev","ip":{"addr":"66.241.125.20","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2026-03-28T06:26:38.625113Z","last_seen":"2026-06-22T17:44:30.972669Z","alert_count":2,"request_count":2,"received_data":760,"sent_data":1141,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-06-24T21:05:48.981268Z","alert_count":0,"request_count":1,"received_data":2496,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rewards-threews.app","ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T12:26:18.754104Z","last_seen":"2026-06-28T12:26:18.754104Z","alert_count":30,"request_count":15,"received_data":16553209,"sent_data":14386,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}]},{"fqdn":"play-lh.googleusercontent.com","ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":3758,"first_seen":"2019-09-30T06:57:53Z","last_seen":"2026-06-25T21:36:28.187346Z","alert_count":0,"request_count":1,"received_data":7381,"sent_data":627,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.ctfassets.net","ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-06-25T16:57:36.183783Z","alert_count":0,"request_count":1,"received_data":7711,"sent_data":645,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-02T15:08:00.346027Z","times_seen":760776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-02T15:08:00.346027Z","times_seen":760776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"866b9f7a8ad6b912f0fe782380e44bfc","sha1":"33dcfd59e51ce39315b9d42d54f759b835626e2e","sha256":"25c973ff34baeb5e3ad4a62d47042f988ef5035a908a2dd9e8ee66a1c2cc9308","sha512":"240f377f374158208c9e6c5d7ec1b234119576d6eda936cf21e10df164da871855552e86b658153c1bed463612ce61ab1f3b05904b9fd84af2a524d82135f6fb","ssdeep":"3:N/BKL1XnSm8:eL1k","tlshash":"905504c07c7030f31414d400d150551d500d0501153f0445707d05dc17300000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.065377Z","last_seen":"2026-06-28T12:30:47.065377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"692d01118af75c595da62777b879a3e4","sha1":"3995be4b84b7e56b9f015b4cb9281f7cb3aea3f9","sha256":"59f9c5a79535d7938c30a2c00d12e0251eacb1074240eb0c78cf193f4dac39e9","sha512":"a116a288ade9797d33aa1e26193040bcb91cb28b92a5c7bcb9f8cc19397077a587eb491416f9ddd6bb6a936a93004cb48f8583a235d48587cab2de577d6c8559","ssdeep":"3:N/BKL1XnSlcE:eL1ccE","tlshash":"cf5504c07cd070f11451c404d170f415500d0501751d044170dd07fc17301000555740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.06693Z","last_seen":"2026-06-28T12:30:47.06693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12cb3064d0956c6","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d01b92218ded697b1b214f189c4ad40c","sha1":"d980680e5f2d7098cb1d855d38e6cd438552bd9d","sha256":"9c54b2cab17e8ee0c1f83789b0696f4a8e555c136d341c22b9ad489804d14108","sha512":"0fb322fcb9f746bf9229b22add2bdf6d5f965b33383f94e774dd844d5136917a1c59a72f1fb426b86bc1927d160bfa6ed157eb48e35222f38ececbb41d75fe47","ssdeep":"6144:jz6xvqEffCggH9SpRO4b/9Cqd+R77ULDMVYWtODgGDGgoHMTcNA1Gk4QxkMIV2wg:boWW","tlshash":"e924b7cf74c67807022715f5842ff04f625e4dc4821c292a5a2186e07abdf799b7fab9","size":218345,"data":"","first_seen":"2026-06-28T12:30:47.054785Z","last_seen":"2026-06-28T12:30:47.054785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-07-02T15:09:52.704994Z","times_seen":61460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7d30a83c3f50310a0524b697dce06461","sha1":"7562943ab6d83f401b484057a35d9851aa316e77","sha256":"fcb3141833f55a483ace03ea96b5022ac0fdce1382e8345da541ab6df068c9e1","sha512":"57004c55c5d5e02bb2ecf4871f8faed10a1e016f25e2953d0031d37a8da70602cbd4e3129d0561b1859d79fa80078e9be2fdc1ed5e9ef7dc9ac104f3aaf8f05f","ssdeep":"3:N/BKL1XnSg2:eL1g","tlshash":"b05504d07c5074f11410c400d1505715503d0d011d7d0441705d05dc17300000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.069527Z","last_seen":"2026-06-28T12:30:47.069527Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d56d3099c9ec811bf6749e7f1cb5716b","sha1":"ba0a6f7fa4239b517158ebbef208e54985070fe3","sha256":"0f0b6431a6f1d1f9b9bfa0392a985e0340b12ebf9e8651bfd802ba6e1a67b20b","sha512":"0fce59205550a19371901ce4b865745f81da9c1dc3998b49726444e9bae791997dba2ffdfb9147fa89b00512aafe1c902cd245bee74d4ca500bc2cef5822e439","ssdeep":"3:N/BKL1XnSlRVWn:eL1c6n","tlshash":"855504c07c5030f51510c401d150f415f10d0551551d0441705d07dc37300000555f40","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.070775Z","last_seen":"2026-06-28T12:30:47.070775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9194303052704559e7d5ef6ca875ea95","sha1":"a0e36d467beaf1614a90a1a5045349a1f3dcb174","sha256":"903541c51e8346a7298bdb0e527b27359c59ff30f4e70836bb31b92adcd9ac4e","sha512":"bb59bd9fc9501ed29d5d3a7c46eb7748e48d8eefde07e979b4646c6ec2f5e171fb2bc670aa9d1e9856a9fb3c0cc34a1a48dd8856ea6c884fd4f3aba54446b8a8","ssdeep":"6144:Jl+B8iy5uRRpN78NPxcbI38ndGmSnOPavshgdZBiri1bWc/ZzK4UT658kwipCv8Y:dTsnPAs","tlshash":"7b34d9c638c2b415566b78b6046fb0eeb2ae4c88561818199320c5f13abcf2d9f7f57d","size":231871,"data":"","first_seen":"2026-06-28T12:30:47.072068Z","last_seen":"2026-06-28T12:30:47.072068Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/1d7f95e2-672b-4b66-ac8e-27b01c24f38f","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-07-02T15:09:52.690155Z","times_seen":61410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc12ee09648ed095b3eee0cbe8d833e6","sha1":"4e46b502ed270589e9493b7e0fec80e2d266203c","sha256":"150cd0381f37f8d75da3786e8f5b3ec4bb55f9e35cb86bb3225b6efac133d583","sha512":"e82c75e427e2464c06e0076d589662ef5a138984e83b0ee19c821cc444f5e30c7e3b312038931305edec67bb636b817ace6fe265116dfcb4f934cdf4f6d9efc9","ssdeep":"3:N/BKL1XnSii:eL1u","tlshash":"9e5504c07c5030f11410c504d1d1d415500d0501151d1451705d05dc1f300001455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.074412Z","last_seen":"2026-06-28T12:30:47.074412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-02T15:08:06.259533Z","times_seen":384307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-07-02T15:09:52.675335Z","times_seen":61735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"263f2a8ebe9d0bae945d4cc7b6f7a33e","sha1":"696d2b0a69fc3f32820491cba82c0270a33c1e17","sha256":"8c65151c1f946c59ddf7f574d3ac39610725a95475a57c1aa3b05793a481d6f5","sha512":"962c6d5b1a475a01223530053d2bfe3252874d05734d384dce9edf2f782c222c92d1333ed20d23906729a403dfa700099a83d719ae5c9955addfdfa0ef7c7a1c","ssdeep":"3:N/BKL1XnSgv:eL1V","tlshash":"925504d07cd030f11410c400f5505415d01d05011d1d0441745d05dc37300000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.076986Z","last_seen":"2026-06-28T12:30:47.076986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2b82332451ac50cf6db196a4fab8821c","sha1":"c87da62e91b8e78e11a1e6c43714bd6c7d923e4c","sha256":"bea1b238bbbbd08527d508862d39f52bfd2299cbf3f065e54b7d4638329ad775","sha512":"e466763cd7cfdfeb6a9dd9238c363070bc5bf53cc028425f56043be0d0fcbf28c478d1a558da48acbd47f3ce3313cf9dbae5d3e289f7ede024bd8cc9431debfe","ssdeep":"3:N/BKL1XnShRR:eL1YX","tlshash":"3c5504c07cf430f11450c400d1507415f40d05011d1d045170dd05dc37700000455741","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.078763Z","last_seen":"2026-06-28T12:30:47.078763Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79c28f8d7e6e352034fe99396c41a185","sha1":"2579599158b692ee13277b8618a6e958ce19559a","sha256":"97f93211e31e50817d3b28974a1e2e1e6682187c6a0f19ed07bd13db28282550","sha512":"3557f28b25e1816a72d603050a054c2da1c8d2d6f2d293d6300bf3ca7a026e79275c1eb0000199db0a3ced6438015871303d283fc6757ddb374f304c3cf9e0ae","ssdeep":"3:N/BKL1XnSmW:eL1e","tlshash":"1d5504c07c5030f11410d400d1505415500d4d01153d0441707d07dc17300000455750","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.080034Z","last_seen":"2026-06-28T12:30:47.080034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/ec0b8741-a3a7-4501-9fac-f3e973147f93","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a1c9aac4e4fa453a00405c81bbb077be","sha1":"a333df6ecfcc7eb94d43ab2e3fa6a281d685a595","sha256":"5cce349c502e5a5adb33de71bfc5df3a97f6f9eb3486fb00bad35a2f31a4a720","sha512":"98e3b075623290c855da62f834161db58cae2fecbcbdf44c8eff526ce6ab52477fd62cb623dd79c8db34c5ac3d74e93d28b6159ae3b5e0482251319b56e80e57","ssdeep":"3:N/BKL1XnSndK:eL1eU","tlshash":"335504c07c5030f11410c440d150d415500d0501151d044170dd05dc37300000455754","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.083063Z","last_seen":"2026-06-28T12:30:47.083063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5b875a322d635638750dd46abed8c486","sha1":"a12392470453dfa24a1f960d1d1357025514cf47","sha256":"71c493b7479b65bbce48b0e280e02f7c7435a74d2f3b10148dcd7628b60f01bf","sha512":"95167abac2e69685a46805968d9cc6e63243605a13dc21b81767ca09039961d28a86cab92848f410004241d525f0c89a2c19710f488aa77fc537a3c7746be618","ssdeep":"3:N/BKL1XnShdy:eL1YY","tlshash":"795504c07cd030f51410cc00d150d415d00d0501155d044170dd05dc17700000455744","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.086036Z","last_seen":"2026-06-28T12:30:47.086036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-07-02T15:09:52.729648Z","times_seen":61802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-07-02T15:09:52.679437Z","times_seen":61569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7841f9add16df8d323b45178cc43eef1","sha1":"429d27e2415c4a36f95eda679f70e8bbf4e2b475","sha256":"0279b86ca7f280eb3748cdc90d5c28799d24fd41edc6cb031d47cd439f03542d","sha512":"f76e21ad94250288ece4c677eb5c3782c4e452858d68a9499301272f676b6a28202dc984c687f181e6742864fb3652afc5cdb7c0b7db5c65b708310e8c6f6aa6","ssdeep":"3:N/BKL1XnSgL:eL19","tlshash":"a05504d07c5431f11410c410d1515415500d0501151d1441705d07dc17310000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.089851Z","last_seen":"2026-06-28T12:30:47.089851Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2755ed934c6ae171edae185a8a7f6dda","sha1":"5c5cd4905540a030c480b0175f870e429711dfb9","sha256":"72c52e8ad12dcb9c926ab0a3aaa03b260125753f079a4e225b04b84957c18335","sha512":"87c2e4f7e20fcd58820f07862e799ca6724f308b30b8f0fb5bd2c4edf83738846221f74ef401f812f1790a1576efb34b2df74d86055ce34a7b700d0b28637fb2","ssdeep":"","tlshash":"e2d0a7a958658930659c025b107ae3a5656121947611968081d9cc2e6a10dd304b1a58","size":217,"data":"","first_seen":"2026-06-28T12:30:47.09132Z","last_seen":"2026-06-28T12:30:47.09132Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fc02a98bc9a5f4271e5c8d8bfaa902ae","sha1":"63bf1bbcc1054dd348adca14941a1d7642cbc92c","sha256":"3f6a9a068b153302fe63b7719f06d583c17d173f46f5a987386234df240197f8","sha512":"8a16cbce894ac1234c3dd94f4f23bb751c76aa74663aa81708bb3687ebf5baf306b1524b03155059a7d5954936d539b364847d6c7165ece4dc1355d2c712ea39","ssdeep":"3:N/BKL1XnSlcQ:eL1ccQ","tlshash":"255504c07c5070f11410c404d150d415500d0501f51d0441705d05dc17300000575740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.105106Z","last_seen":"2026-06-28T12:30:47.105106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/54743c91-ea60-4b7b-8a5a-5de0aeaeeb82","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3e91d69ec61ae900c9ce2dc2bc7b905","sha1":"da3a41abfdf6916cf86ab678a786c3a7ad1473d3","sha256":"ac171fc7ecbe57d91cc48eea646121f6cc2bd899a522dc8788d8dcb3a2a96040","sha512":"ad711700021ddf7855365df93e783d3cd81c423a1c225f7abce77e82a0379f20781a1643307ffc8eb688c2dc16561dd891984ffd7d465866cace9c17dbc566b8","ssdeep":"3:N/BKL1XnSlWFn:eL1cWF","tlshash":"f45504c07c5030f11410d400d150d415510d0501551d04c5705d05dc173000005d5740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.107402Z","last_seen":"2026-06-28T12:30:47.107402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4ba6619a23da2e45e982076b9f32b02","sha1":"d93bc0a7a1ac8d768ee3c08b1bfd2c7504b08a84","sha256":"78a335dac492210e425539505a688f47e17a88bc55ea27cf3930e7468f1ad6f1","sha512":"804311276290b60560d2df9ec57206bad5daab4777bdbffb4449502592b1acd6b58cb54c93f13f7130b54bbe91774869eec2b55680f114de44b34b4de869453e","ssdeep":"384:PB7LCN+KWwpJkxPDiqWINejPGINPieSWIrllx+a6nv8SF4IQG:P0MwpKxPDiPlq+S9rYvoId","tlshash":"e39282c6f4dd709b032330e6056732cab2bbfc6070995910c711aaf8ba697ad756bd4c","size":19770,"data":"","first_seen":"2026-06-28T12:30:47.049418Z","last_seen":"2026-06-28T12:54:54.540792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/frame.html","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c18146a4cac24d04bfc9bd6aaa25105e","sha1":"e05df9537875b37c86abe8310630b7a5279c2773","sha256":"990186b0906f89f3224ddd6f9167f8c5fbb0e381ddecd5a43c07fca52f3cdd0e","sha512":"6ad85e998203ace49e885335e9fe87b09b72fd7d9491c907cf76a76f88ebe828f49a9fad68ee24ca29bc28176474c68e14307c0dc78d515ba555ee9db0e5b8a7","ssdeep":"","tlshash":"cf11ba0aa5e302a224fb572e5baf31602a33402a3108e454bc4da3005f1ce0a4727eed","size":1078,"data":"","first_seen":"2026-06-19T16:50:14.641846Z","last_seen":"2026-07-01T04:57:30.065944Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/frame.html","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd58e4524780f9c8bec45d40bb9382bf","sha1":"deec3e5e464d80cf300a40165f89b4d45038b85d","sha256":"ea120bccdedb9c2adafb66370c84415af2507cfc3d97d001d5ea04bbc7a1862e","sha512":"40b1852e4ed64ee8922f59fe2d301911eab2ca6155b41b0ca33e3bef57ff6916cd26b8058b0ae68e810b9382bde270b3cd6b9c6d06c1d6f8b893739c5ea67438","ssdeep":"6144:w7Dr5lWoYWr8gR1mAYYfAS5AeNnUv7deG4WACQkO/AxICib3jzrwg:cm3WrD/fASTNnkdeGqCQkYb3jvwg","tlshash":"5e74959373e4acc3124f5f3b6305b5e5e53daa5d75491aebc5083c38d9e482ae6e0a30","size":354633,"data":"","first_seen":"2026-06-28T12:30:47.110646Z","last_seen":"2026-07-01T04:57:30.066705Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/frame.html","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d1887bbfd3e31f221d9fb8d17cce088","sha1":"536b070e27402fc5b24730e12707d90561e54532","sha256":"414ed167e119af9c29ae0c39bbce8fbe1967611d1881bdc55b4e33eb45a77d92","sha512":"41d9463ad26fb0c077bb746ec0169c549eabef9011971b62dbf92c595304c4b0c105884ca33353b8ab52f84b809ec3174dddaaf197b90cf48eb8cc1ad8b2d240","ssdeep":"","tlshash":"7e119c797a1a5534cac5418b317ee7a93d3260617a02a184c36ccc285d18e8714afdbe","size":902,"data":"","first_seen":"2026-06-28T12:30:47.112779Z","last_seen":"2026-06-28T12:30:47.112779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"58eb88952cd8435c00a60d2f81a6f9b8","sha1":"a257f23d1da8c443f84d56619cf0da4f288faecc","sha256":"c7e42967f05ab8ca2727959551ba4c2248de7beb5c8eac24f44b5dda71edecac","sha512":"33689d5469d9b9768a0df4a8e064ebcd9eec2c62980afb9ba943ba8c3c9095e87e9acb2a8ea03fc7f04ba97b979f868c304133703c09d8800096257fb0ce0461","ssdeep":"","tlshash":"50d0a7a979a588356698025b10bbe3a8657021a07611e280c2e9cc2e6e10ed244b165c","size":217,"data":"","first_seen":"2026-06-28T12:30:47.11454Z","last_seen":"2026-06-28T12:30:47.11454Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-30T15:14:23.65232Z","times_seen":4332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ffbbaf2b823320674a90fc3f21a8d33","sha1":"2ba7772c2ad32a08b83d1e35d96467d3ab16400c","sha256":"466c06157711bfeaf897f8a530fed55ff04bd700660a39574c1ed64f02b862cd","sha512":"a73d866122fd355b2699f82218b9f0bb201574279c8f54988b537c1d865d3304addf6299c01387933da4a157874a9dc2898d614f36399a72cd5d41fae6bc8371","ssdeep":"3:N/BKL1XnSnTz:eL1eX","tlshash":"c15504c0fc5030f13414c400d154551d500d0501151d0441705d05dc37700000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.118939Z","last_seen":"2026-06-28T12:30:47.118939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"27ad20ac0e3ac44dd3ca9a851305738d","sha1":"66b0348961d9cdaf465a3370db1e6a375292c407","sha256":"6d6d77ce98e23ca7d6b4a0c779d89ee76f5a1e75ee02804d23b21187cdafb8ce","sha512":"a6db4fee12620396f13154a601ed9d020c2cdd7c7c821f52603c6e83c24d04042844ef18c4be273d5d068d8af40abf15317df89701a1a085df64cf688b212bab","ssdeep":"3:N/BKL1XnSgHn:eL1t","tlshash":"075504d07c5030f51410c405d1505415510d0541351d0441705d05dc17300000457740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.123153Z","last_seen":"2026-06-28T12:30:47.123153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5eaa33e7cedfaf5b342744d6e4f1e958","sha1":"5460feb98332e48e6d3095990e8a4f041cd07997","sha256":"55ab8bd2e1ba7a6823ddd61f3315073db0f44ae204bccbb863d9d3a1a430dd58","sha512":"0b1e61a99967d6e3b288a539c4e302d82c0917f44f4ccc37fa37b029d73d848acbe8df10acbe4b1390eb37b6ad03290997b7e4c496f1fe7adc255b5658d351a3","ssdeep":"3:N/BKL1XnShXk:eL1YU","tlshash":"ca5504c07c5034f11410c400d3705415d00d0501151d044170dd05dd17700000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.125062Z","last_seen":"2026-06-28T12:30:47.125062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"87efe74896d7f806bc2f4380261ee35f","sha1":"c93e10a2fc1f3d4fc98dfa30e9cc01aa36767113","sha256":"794955baa928ad84a2d346f9e07bb9d84f1ff71b7c988d7973e3aaca511ec2fd","sha512":"a916681c35c4f120c735c90f1426dfa130ee3cb62d275dd216b657988227bb20f34fd0ef0ab5022e1c51988ced0410be8788797c896e9f53321cbb7784b962e4","ssdeep":"3:N/BKL1XnSibX:eL1v","tlshash":"b15504c07d5434f11414c401d1d05415500d0501151d0451705d05dc17300000457f40","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.126592Z","last_seen":"2026-06-28T12:30:47.126592Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1001609b4e24d9638b52f79ef2a6773a","sha1":"41a4f2ba7b1f7d21298e412423521040c4637657","sha256":"db5ae4f1b42914db3148f4277bb3caae6a015145910c515f001011d0691fb83a","sha512":"ca3ab1142beada44dcdf54e0d3b51e3d7d3162d2b58ac01145760b3bfde8899c278f4ac21d2dd86373c19bd23cc2bd0fbf8999cd3cba248cf6650c51526393d4","ssdeep":"384:PNzpNV60YHPrMjkGDdnM3S1hyATr8+jbXNIYp9RZhi5xVQWG/PkC2TIWmM4wgl9P:PNNorhGDdnMYHHB3hiRC2T1f4wgl9uA","tlshash":"b192e7c5f8ecb05a033324f4456730d6b2afed90345d5848c731a6b4b892bdda6abe4c","size":19701,"data":"","first_seen":"2026-06-28T12:30:47.063023Z","last_seen":"2026-06-28T13:08:41.122986Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/?__cf_chl_rt_tk=xRlTkxPRU3u1ucktSYFAgBNYFLbEV8xc41Vo_.qvUIc-1782649790-1.0.1.1-67BMJ_BZ5V9Ehs5JmrgOBJFlxWRvkrsrHIbHS8pTl4c","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-02T15:08:00.346027Z","times_seen":760776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7e0459230cd8de5d235ce4a464450e9","sha1":"61ae7c6a4fa428c04b1561775eb8784657181cf0","sha256":"90bed4be50821733373c1d2bbd6a8e52fdd7104f0d333f97c0eb03fe41b72cbf","sha512":"b18ecd100eef01783b02bf8674736e2068553b7122324913448ad0376f3d0c7f19b2f93fac3bbbbaf5af2ac1d52a52d93405e9173aec40ca55cbc2d2652bf77f","ssdeep":"3:N/BKL1XnSnXfn:eL1eP","tlshash":"055504c07c5430f11410c400d1505415500d45015d5d0443705d05dc37300000455740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.128725Z","last_seen":"2026-06-28T12:30:47.128725Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"43d92b57e7372cd5387f1d1ac0af86d8","sha1":"9eb21e3e9b7681c8f95ac582b866aa6828b07194","sha256":"196f15723ec6555c026dd4170d71de8bbc53c69ca35aae2f9348646b270b5260","sha512":"606c69256b55fdf3501815b6145451591fc5320c2202de79d21c343cd052e944eeb9499e202278e4cb84b5cda1baceb5c4e4359c9c849e5d821af8e469412695","ssdeep":"3:N/BKL1XnSkFn:eL1jn","tlshash":"195504c07d7030f11410c400d150d415540d0d01151d04c1705d05fc17300000455744","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.13035Z","last_seen":"2026-06-28T12:30:47.13035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"907bd5627f9debd4a0b48a6efd601317","sha1":"6b36b2836dc05817dee59506d14a4077bf503d60","sha256":"bd2deb319b285f81d2b07c0802df818c828ac7d1334c65c802cc3fe4855ecf3e","sha512":"d4fbc0fe980883a244ce5c1525f75956520a7aca86468d3ac3166c736709466bf28828595732386eb791a78e50f6c37995d20e9e64d5094ee0ee85df6b32138f","ssdeep":"3:N/BKL1XnSnVkn:eL1eyn","tlshash":"305504c07c5030f11410c504d1505455501d0501151d0441705d05dc37300000555740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.132025Z","last_seen":"2026-06-28T12:30:47.132025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a2e69ba1fd5518602c5c41cd2c7a11f4","sha1":"402ee674ad459186606fddb9411d7b4caea9370c","sha256":"f909b339550169f83aa200e54c956ce585d81081d7d65a6c0e0ec943be31e09d","sha512":"b6f05090d8437556740cffdc6782f80a1f5393ce37d1f799a30f71032f181af24b5fecb6ca81d9f53cddd6964b41480c6073fe396ba8cd070b7d32b658425877","ssdeep":"3:N/BKL1XnSiGc:eL1qc","tlshash":"565504c07c5431f11510c400d1d45415500d0501151d0451705d05dc1f30000045d740","size":1337359,"data":"","first_seen":"2026-06-28T12:30:47.133506Z","last_seen":"2026-06-28T12:30:47.133506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj184 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj187 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj188 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj190 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.3570045324188249] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj182 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj185 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj186 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj189 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.3570045324188249] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":91368},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":181986}]},"http":[{"url":{"schema":"https","addr":"rewards-threews.app/favicon.ico","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:50.727Z","timestamp":1782649790727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/?__cf_chl_rt_tk=xRlTkxPRU3u1ucktSYFAgBNYFLbEV8xc41Vo_.qvUIc-1782649790-1.0.1.1-67BMJ_BZ5V9Ehs5JmrgOBJFlxWRvkrsrHIbHS8pTl4c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:29:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 22 Jun 2026 21:07:56 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qo6xzCBAc4cG8qrdcwNcQfL5EeYmmrA%2BNNlne56IWPrfFPKnbtNvdtqPzRsBfAu36%2B8BaBy7Wa9v05B%2FSnJ5yRp%2BGfGyFEr1suCORKoZ5SEuujsCwnKVTa8FREv7PZGN6SeLwwu%2B\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12cb3080d0bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4822623,"size_decoded":718915,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28000)","md5":"eefc171209dadaa5304285affe5c5bab","sha1":"53d821b7363ada0ac8013e57ec6794092f68713a","sha256":"8983cddb2f7d97bff0012412d0f8bcb3e175d85db338f4d7934ccdb0e2eb48c2","sha512":"c326d2e14c359f0367724cbea3970aed03522a68fce8da41324ad4be3867b5dbf5462286a9c954e878ab9be9b96a7f2a2943d761ca39729a61fd16cfcd6cee43","ssdeep":"12288:HfK8VyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AvVyh:Hy8PwEeW5AMZFEeW5AOPmEeW5Agr","tlshash":"982512f50469145f18938cc1a2592f2aee6d3b53a801c2ee2ffd19d36fddc489522b8d","first_seen":"2026-06-28T12:30:47.027625Z","last_seen":"2026-07-01T04:57:30.0248Z","times_seen":5,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/flow/ov1/696527360:1782648014:9d2O0z3myJv4qbZfR7y4-7FH_SdDggY7nf2vir9BYug/a12cb3064d0956c6/wmktipMneyxml0o5sQw6_5YLvb6JQrjI08j0fyils8I-1782649790-1.2.1.1-TD2LeQvywfuKqSkgEA95XgXc8hRT6IuB8cA8rwje2bBIBdZxWFkixbjBaX3U3ADn","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:51.014Z","timestamp":1782649791014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/696527360:1782648014:9d2O0z3myJv4qbZfR7y4-7FH_SdDggY7nf2vir9BYug/a12cb3064d0956c6/wmktipMneyxml0o5sQw6_5YLvb6JQrjI08j0fyils8I-1782649790-1.2.1.1-TD2LeQvywfuKqSkgEA95XgXc8hRT6IuB8cA8rwje2bBIBdZxWFkixbjBaX3U3ADn HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/\r\ncf-chl: wmktipMneyxml0o5sQw6_5YLvb6JQrjI08j0fyils8I-1782649790-1.2.1.1-TD2LeQvywfuKqSkgEA95XgXc8hRT6IuB8cA8rwje2bBIBdZxWFkixbjBaX3U3ADn\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2252\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: d7O2n/fAcKAIDmrDLAc9mNhpZ3qvqzE393ILjHucyYw=$CmxqmH/zzUnAaJFN6SkBUQ==\r\ntiming-allow-origin: https://rewards-threews.app\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12cb309dd22b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19192,"size_decoded":14847,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19192), with no line terminators","md5":"de50214bbebe3f9a421d624fdf9ab846","sha1":"8b74ced66e716768eb40f3d2fe94ee81bb291617","sha256":"5b54e12cfea36fc42e8a920d235adf67a4d0a74bbc7c2d16473629ccb05008cd","sha512":"67496b1765d0fe4caaa1254d80037b30c59fc17b85351b2e77205a495cda65a29730d8a95d55c2ad72117e4dab1b34121f0df90c5316fc60a9e8f38a8d6bdbaf","ssdeep":"384:S7tVnkj4dQ5thvSt3SQWlQX0RJKC2AtDKXD9uIC9BKlh8g+nSxldNdF3:0tWjSQ5/vSsrYcJwAM4Ylegbx/Nb","tlshash":"c482f1f24fde6feb8ffa46b8c4d81c1a1812ff453ca391e54ca569440156b8c087e2d9","first_seen":"2026-06-28T12:30:47.030649Z","last_seen":"2026-06-28T12:30:47.030649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.509Z","timestamp":1782649798509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=yOYlKOsEdZdQ3WUmu8VhQ3v_f.fvDGm0_XRXGBAbDLE-1782649798-1.2.1.1-WLpKmEfbGXfzeApzkIhXYKZ2hme5ENoyhqzYUrrdEtNj9583VnVSEhLMpvj.J3a_UPcCH5Qa7SOPDKkCNSEia6Z8dVx1xHdFngtkYO6KtAQRCGfejZNS_ZS_bJYFd87dCN_koE9IFXwV5RL6_VCXsygo7r57p7q1jnzk.01ub0cpAAIxyIu.shdyP7ViGe2RQppDRlfQUiHoCyIzbmbsvELmKxWcuotpHwHt7vP.y_t9UsoUzBVRmm045nhUOsWr91j_EUISl4.FlHfm7.5WobukLtzW8Pw_UwCVUBPTUqBuox6EYGzU.FuPSuO2OauKV_o5RO3LtwpHfHK5Xxh63xBl0lzhiovbeLYfILczyPq_7JaNP.I3W7NUT0382VaYODBpr7f2juiGo2KIH.0Unh.rN2ALKpYGUjUo85ADY73ujsel4iKOdFonSUV.PEoF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\nserver: cloudflare\r\ncf-ray: a12cb338bf94b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:08:22.549436Z","times_seen":16915052,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:51.088Z","timestamp":1782649791088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-QMB4W7J24xd3O7pXBbT3F8' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12cb30a4f38b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: oagwij5v;dur=249738, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249738,"size_decoded":97117,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"2027512638c4ddf2929176b87359bd05","sha1":"1ba7ca07d94971c7ba320783ee792c57407a9d10","sha256":"8d87abd411f708db2c9e083eed75bbba07b0d733a7c99e118dab2f31e0299c46","sha512":"30ef5004e134292dc20602afc3edc2a1a0153b690cf836c87d4a442ec8edf8cc7a81a6cba6880abb95fb5c0df2636e903c83ea94a3624434156149cbfa7e6803","ssdeep":"6144:vl+B8iy5uRRpN78NPxcbI38ndGmSnOPavshgdZBiri1bWc/ZzK4UT658kwipCv84:PTsnPAc","tlshash":"7f34fbc638c2b015466b78b7005bb0eeb2ae4c8855181929932086f17abcf6d9f7f57d","first_seen":"2026-06-28T12:30:47.034872Z","last_seen":"2026-06-28T12:30:47.034872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a12cb30a4f38b515/1782649791473/Jt0PeEQo4WgQSPc","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T12:29:52.241Z","timestamp":1782649792241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a12cb30a4f38b515/1782649791473/Jt0PeEQo4WgQSPc HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:29:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 3511\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12cb3118dd2b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3511,"size_decoded":3732,"mime_type":"image/png","magic":"PNG image data, 72 x 47, 8-bit grayscale, non-interlaced","md5":"0f19e9ca567cf93b9f9f11da7ebdbfdd","sha1":"5cdf18426c75de5c2f80c39483d204cb58d6382e","sha256":"cc68cee7c6cb5a3530ef8d0d982029fe96d187219e80bf0ab380566422710463","sha512":"9f0a7b7e5d9e1bd05f6cf530cba9b023ef8cf02e0bea82b0d479c9c74f623ee1df26a9416fec468cfad6c2efca3a4a737b146a8bc34e0e9551d82891852ebddf","ssdeep":"","tlshash":"b87112cbd3119d3cc535003944321400c8220121840001504102d93908513040678a02","first_seen":"2026-06-28T12:30:47.038168Z","last_seen":"2026-06-28T12:30:47.038168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/lql-v5JBq7UFMLQALnvZCX6r1X_Av8rVfrkzuv_fdjzEv88ucl4f5iCFfiN9isEc1TE=w240-h480-rw","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.283Z","timestamp":1782649798283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:03 GMT","end":"Mon, 31 Aug 2026 08:36:02 GMT"},"fingerprint":{"sha1":"51:D1:06:A7:1E:A1:52:06:96:15:19:D9:14:9B:2A:AD:55:AA:38:37","sha256":"BF:70:DB:D2:E9:F8:36:07:6D:EA:4B:F3:53:01:49:0C:4F:43:AE:3A:87:BA:2E:31:39:BB:75:E6:0D:C0:9C:69"}}},"request":{"raw":"GET /lql-v5JBq7UFMLQALnvZCX6r1X_Av8rVfrkzuv_fdjzEv88ucl4f5iCFfiN9isEc1TE=w240-h480-rw HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.webp\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 6810\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\nexpires: Mon, 29 Jun 2026 12:29:58 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6810,"size_decoded":7381,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6b6fbff2fe93ac387e336d1dec866da","sha1":"af793695e73c59d11226d2d83a61dbf80febb06d","sha256":"44359cb6d8a5a421d5ec29407d4fba15fe0e7fbe89d4d3e8ccc7d99af5b6690d","sha512":"a4b9122e7b85c5fe36323bf871dee9f45442a0bfb41465c12d39432e5d72cf85c324b304c562c2a59945e5dfeb4ce1782edcc37c1accd22bdbdd9fce843a1e59","ssdeep":"192:gNjyOBORmR8u0ASqueIQ4BD4ky16Xu/JbWL6l54a7p:gNeOIRmIAjNU4kyEuBbxZp","tlshash":"cbe18ec2b0f62d6cf42af47addab5e574349f30449020f1cca529acab6a3cc5d6e191d","first_seen":"2026-02-10T19:01:19.766688Z","last_seen":"2026-07-01T04:57:30.019582Z","times_seen":301,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#okx","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.285Z","timestamp":1782649798285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=RMxamdbGAkxQALoOVukYxOyfLKnzuUgyGE743cXWXJI-1782649798.5134697-1.0.1.1-qsEQLpDAMHN6XIoYVqA584VL4WMFh_NR0bDTvIIRI2loQxaRblJpb9h2ijgwh5uQjA.3RrbLEHihaWrZvfNsm0wnU.8AjrodwYTT9SaIpqiLmHPALSmnZHuQohHqOG8m; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Sun, 28 Jun 2026 12:59:58 GMT\r\nlast-modified: Tue, 23 Jun 2026 16:01:11 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 419326\r\nexpires: Sun, 28 Jun 2026 12:39:58 GMT\r\nx-static-request-id: 0R21M665TY7ABX38\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"0338e8231f6db1f81784e63861cb71a6\"\r\ncontent-encoding: br\r\ncf-ray: a12cb338bb842efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2161826,"size_decoded":974740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2884ab29d7a8170c45a1635a4630a3ef","sha1":"7702691075ae34db711d26f2b3f8d6db943ba686","sha256":"c1e4bf60638258e762333e377702f2d4e4fc90a960780859085bcc840205d8a4","sha512":"0b71d62f863c1cedec2f14de3da5f7da7d5cf250ce2d7847e75b0422a6c7a0ef60c7adf5fbe12fcefc0df8e965442f54f417bfa192a4dba6d01889a36292f733","ssdeep":"12288:8HamqgPgRaujhzJJuDeCNqY8Gi8mwXynxliFCOWYAoF5fAF0q:0PnujhzJJuDeCNqYI8mwXGxligOACf7q","tlshash":"4b2508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-22T15:05:26.838489Z","last_seen":"2026-07-01T04:57:30.013348Z","times_seen":159,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":47,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/o10es7wu5gm1/TWlW6aoAXPX7yUg5ShsZ0/c02522911b90b766eb8eef709e42b8eb/WalletLogo.png?fm=avif\u0026w=640\u0026h=640\u0026q=65","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.286Z","timestamp":1782649798286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /o10es7wu5gm1/TWlW6aoAXPX7yUg5ShsZ0/c02522911b90b766eb8eef709e42b8eb/WalletLogo.png?fm=avif\u0026w=640\u0026h=640\u0026q=65 HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/avif\r\ncontent-length: 7176\r\nlast-modified: Sat, 23 May 2026 01:02:48 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Sat, 27 Jun 2026 23:11:26 GMT\r\ncache-control: max-age=31536000\r\netag: \"b3fde880556f8a20e9b5ade67abae28c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3130c9b603e4215bb05d32cd39e3843c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: I-s0T7r56YbVhuWzZb5qBqvSjFzYtODlPDxHUXpa0GURjRAggZUkRg==\r\nage: 47912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7176,"size_decoded":7711,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b3fde880556f8a20e9b5ade67abae28c","sha1":"f24a055a5aa5fe7457c803e2b8a0bd302c4ba28a","sha256":"c7cb8b282f0001285e407c6cf7ed2e58a7177ff58aee8affb5b317452f60279e","sha512":"fdb8bbbd63826f25ca96f0d40c4bab7e56c111bd6432f356fdba72e07167e58fadfc4c899077c01519db8ce46c8019d63373793a0d3006faf622b5405bde212d","ssdeep":"192:+zCZNwhQ5hC+J8pBgRwgjrls4ZCtVWBrEZkmW5B:SfKzC+igHjrls4MtVWBoKR","tlshash":"c3e18cfbb3eae952cb5af3322961400033b74d3623927d0d373819b1d4581a3d15aa9d","first_seen":"2025-10-22T11:06:54.149612Z","last_seen":"2026-07-01T04:57:30.020634Z","times_seen":326,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":6,"connect":8,"send":0,"wait":11,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12cb30a4f38b515/crncPzFJqB442tcPd_0KzU6nH_KFCW42uvC2CX3nhY4-1782649791-1.2.1.1-P0HQhiQLmKsdRhNvqIaizeDMS4rGoH7TBFdoRfjUexvLyVrS_Y5hMGrqmEoIGSyR","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T12:29:51.466Z","timestamp":1782649791466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12cb30a4f38b515/crncPzFJqB442tcPd_0KzU6nH_KFCW42uvC2CX3nhY4-1782649791-1.2.1.1-P0HQhiQLmKsdRhNvqIaizeDMS4rGoH7TBFdoRfjUexvLyVrS_Y5hMGrqmEoIGSyR HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: crncPzFJqB442tcPd_0KzU6nH_KFCW42uvC2CX3nhY4-1782649791-1.2.1.1-P0HQhiQLmKsdRhNvqIaizeDMS4rGoH7TBFdoRfjUexvLyVrS_Y5hMGrqmEoIGSyR\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4674\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$FwkEOx8uavC1U5oniY5YbQ==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12cb30ca941b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383804,"size_decoded":289719,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7dca67afd6b6249167ea54d0db6e047b","sha1":"90269d4e6c217da37c46cfc86e85302ebe7b80f0","sha256":"e5cb645eb7c3c01241593e7a8efbba8d31dfb7b1185aa8a7fd5b321bf3e2ce05","sha512":"f6fe4e67e47473c9e3e5594c2392c55842c1eea0fcb7197f37a7dc5a0775f723f233765ded7bb94f55a36803c17f345e65f2a80695580cf05c18b7d63bbe9475","ssdeep":"6144:FpJu72hVISHnqUN3Arc+PEMelO/m/fAgL4+5+9x9gQEwtLRUMsQk0g1UYT4CTk//:FPlizUdh+PzelO+fZFQf9RFsQkk//","tlshash":"6d8423b9bb3f3a1e0b0b973fc171ad1934845d5d147160f0aae8168b8e9ec58693885f","first_seen":"2026-06-28T12:30:47.045011Z","last_seen":"2026-06-28T12:30:47.045011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:57.698Z","timestamp":1782649797698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 30 Jun 2026 12:29:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FdjTa%2BniPa0p%2B4rbbwLs0Sbcq9cvyoYvEqqcYw89wil8RemcuOYWFlu5yacxhHxJ%2FssOjT33oZP9Un%2B220K%2ByCWVaAe0%2BRelmJiQZSPKTkYnfKVpDkudEMYRNOBWgaluhEUT7YQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 12:29:57 GMT\r\nserver: cloudflare\r\ncf-ray: a12cb3339f36b4fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-02T15:08:06.259533Z","times_seen":384307,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:58.051Z","timestamp":1782649798051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\nserver: cloudflare\r\ncf-ray: a12cb335df63b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:08:22.549436Z","times_seen":16915052,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/frame.html","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:58.082Z","timestamp":1782649798082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /frame.html HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 21:07:56 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZY9pfgx6%2ByA91wzp9QCEBG9jn3yKU6LbGf2hCXSv71Zq%2B5V4ZWUZK1C5ebv6kS0FSBssPRdrAHGVZe%2FMVYTMoi3RXSRemvJieASnxVXpHKT8NzmVGVuPhAkl2j%2F9GXK4Dq4JiKCo\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12cb3360f67b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}],"data":{"size":381787,"size_decoded":123608,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39341)","md5":"6c8f6af4593220d4673953fa8dc446ee","sha1":"f483982ae3b3ceea7f53ba131f3478041def7577","sha256":"9d5267d74bd4f0c61a4fa6f5fd7af0d453c1ec693d1c1d7c1d50da91478a08fe","sha512":"a0fe0cae188827e7f7e62f3eb2c333a4b09d561dde504a5c43bc2ba3597c49d9d8ab89f8860a58904134c03d323f22f18cd6fb408835efcb98e80d77ce1429a3","ssdeep":"6144:qZQPeLT7Dr5lWoYWr8gR1mAYYfAS5AeNnUv7deG4WACQkO/AxICib3jzrwtk:+QPeL7m3WrD/fASTNnkdeGqCQkYb3jvx","tlshash":"9984949373e06cc3124f5f3a2309b5e5e53daa5a75495aebf50c3c389be4429e6e0630","first_seen":"2026-06-28T12:30:47.047761Z","last_seen":"2026-06-28T12:30:47.047761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:58.085Z","timestamp":1782649798085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12cb3360f69b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19770,"size_decoded":9216,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19770), with no line terminators","md5":"d4ba6619a23da2e45e982076b9f32b02","sha1":"d93bc0a7a1ac8d768ee3c08b1bfd2c7504b08a84","sha256":"78a335dac492210e425539505a688f47e17a88bc55ea27cf3930e7468f1ad6f1","sha512":"804311276290b60560d2df9ec57206bad5daab4777bdbffb4449502592b1acd6b58cb54c93f13f7130b54bbe91774869eec2b55680f114de44b34b4de869453e","ssdeep":"384:PB7LCN+KWwpJkxPDiqWINejPGINPieSWIrllx+a6nv8SF4IQG:P0MwpKxPDiPlq+S9rYvoId","tlshash":"e39282c6f4dd709b032330e6056732cab2bbfc6070995910c711aaf8ba697ad756bd4c","first_seen":"2026-06-28T12:30:47.049418Z","last_seen":"2026-06-28T12:54:54.540792Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#backpack","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.281Z","timestamp":1782649798281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 12:30:01 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=PYBXt11q7IoCR9R6yYkC6Dq5ZDTfL7UQ8eL3krn0W5A-1782649801.6327138-1.0.1.1-CYNEPrIXBgnSxGvRuprNjkYTTDzUTrgR_1nfaX8hTUdvrbrASGgpbcoBYMirjb1cfU3mm4EkT7m.ySKYp3PjR4Q78z0sl8nnai7fV6nHFHqzgOXqh0lR1xEMmSVnyOTh; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Sun, 28 Jun 2026 13:00:01 GMT\r\nlast-modified: Tue, 23 Jun 2026 16:01:11 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 419330\r\nexpires: Sun, 28 Jun 2026 12:40:01 GMT\r\nx-static-request-id: 0R21M665TY7ABX38\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"0338e8231f6db1f81784e63861cb71a6\"\r\ncontent-encoding: br\r\ncf-ray: a12cb34c3ad12efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2161826,"size_decoded":974740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2884ab29d7a8170c45a1635a4630a3ef","sha1":"7702691075ae34db711d26f2b3f8d6db943ba686","sha256":"c1e4bf60638258e762333e377702f2d4e4fc90a960780859085bcc840205d8a4","sha512":"0b71d62f863c1cedec2f14de3da5f7da7d5cf250ce2d7847e75b0422a6c7a0ef60c7adf5fbe12fcefc0df8e965442f54f417bfa192a4dba6d01889a36292f733","ssdeep":"12288:8HamqgPgRaujhzJJuDeCNqY8Gi8mwXynxliFCOWYAoF5fAF0q:0PnujhzJJuDeCNqYI8mwXGxligOACf7q","tlshash":"4b2508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-22T15:05:26.838489Z","last_seen":"2026-07-01T04:57:30.013348Z","times_seen":159,"resource_available":false,"data":null}},"time_used":3409,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":58,"receive":0,"ssl":3344},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend-main-proud-frost-1362.fly.dev/notify-visit","fqdn":"backend-main-proud-frost-1362.fly.dev","domain":"backend-main-proud-frost-1362.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.125.20","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:30:02.152Z","timestamp":1782649802152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fly.dev","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 23:22:45 GMT","end":"Sat, 19 Sep 2026 23:22:44 GMT"},"fingerprint":{"sha1":"A7:FB:64:85:FD:0B:7E:8D:92:53:6D:A8:77:B8:9E:8E:DC:28:EE:70","sha256":"F6:3E:15:49:6D:97:94:61:45:C9:E5:D5:CC:21:C8:3F:12:DD:2E:35:14:DD:9A:B2:21:40:85:69:53:71:9B:19"}}},"request":{"raw":"POST /notify-visit HTTP/1.1\r\nHost: backend-main-proud-frost-1362.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/\r\nContent-Type: application/json\r\nContent-Length: 202\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: zstd\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\ndate: Sun, 28 Jun 2026 12:30:03 GMT\r\nserver: Fly/866e52186c (2026-06-25)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KW73AKGT0WQV7HJ52QEEH72Y-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":11,"size_decoded":369,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-02T14:58:46.594085Z","times_seen":13602,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"backend-main-proud-frost-1362.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T12:29:46.424Z","timestamp":1782649786424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 28 Jun 2026 12:29:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-ACo9fqHqHfyy1mL0z5P9R4' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12cb3064d0956c6\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rp4VQR%2FF3XBoEU2exLlQK198INwQZyTeF6b8RXyLdJk1uSfuc7LCGCPzUftoddsipCBrg8qx0COPfD9NDGTK6CNciQFN%2B5GJBKGhAIq%2FVW9RdckUBWkbLcZnGKErsjmIQ4a%2FTl63\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12cb3064d0956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5580,"size_decoded":5539,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5580), with no line terminators","md5":"9fcbe821e0af54168cf064047a8a1177","sha1":"01c853aa65c6e4d8a49b3f72144c8746395514d0","sha256":"29ff621ae897ec8c810bba70ef32d9d595e58cae405169329ba7d4e84f8166c9","sha512":"c8c09c846d7214df6c965d83c26cfe1b9b8e95c489a29f6d9a51006f076834d01f27126ce92134db58c483f67d42c13ca32f28282788fbb454746d78c56c6b8e","ssdeep":"96:PNy6toXZzIEb0EaW87WJCe4WDgWyNlAcFs9whz0EiA2ErIuhYzueh8VW6mw:PNPtkCBCj47lHzs9wRrIu2ynSw","tlshash":"f7b14c73af32401b57e95f85747bb3ecc221b195bb04a0d4d4da872c9adde1e80192d4","first_seen":"2026-06-28T12:30:47.052741Z","last_seen":"2026-06-28T12:30:47.052741Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4030,"timings":{"blocked":-1,"dns":4004,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12cb3064d0956c6","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:50.704Z","timestamp":1782649790704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12cb3064d0956c6 HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/?__cf_chl_rt_tk=xRlTkxPRU3u1ucktSYFAgBNYFLbEV8xc41Vo_.qvUIc-1782649790-1.0.1.1-67BMJ_BZ5V9Ehs5JmrgOBJFlxWRvkrsrHIbHS8pTl4c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 12:29:50 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12cb307ed07b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218345,"size_decoded":79146,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d01b92218ded697b1b214f189c4ad40c","sha1":"d980680e5f2d7098cb1d855d38e6cd438552bd9d","sha256":"9c54b2cab17e8ee0c1f83789b0696f4a8e555c136d341c22b9ad489804d14108","sha512":"0fb322fcb9f746bf9229b22add2bdf6d5f965b33383f94e774dd844d5136917a1c59a72f1fb426b86bc1927d160bfa6ed157eb48e35222f38ececbb41d75fe47","ssdeep":"6144:jz6xvqEffCggH9SpRO4b/9Cqd+R77ULDMVYWtODgGDGgoHMTcNA1Gk4QxkMIV2wg:boWW","tlshash":"e924b7cf74c67807022715f5842ff04f625e4dc4821c292a5a2186e07abdf799b7fab9","first_seen":"2026-06-28T12:30:47.054785Z","last_seen":"2026-06-28T12:30:47.054785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T12:29:57.195Z","timestamp":1782649797195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/?__cf_chl_tk=xRlTkxPRU3u1ucktSYFAgBNYFLbEV8xc41Vo_.qvUIc-1782649790-1.0.1.1-67BMJ_BZ5V9Ehs5JmrgOBJFlxWRvkrsrHIbHS8pTl4c\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:29:57 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 22 Jun 2026 21:07:56 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnICrrwer2K8tGbw0L1TkEeKJ5OZiKMCGQRYvN%2BeUI53A2RaEGcGnvXpPxNM%2BvFbrBPoh5WqYFP65RfVlLyQqNE5iYpoorgPOp5gruJmOIvjvod7Tkf7rIkucMo9EqrUBp%2FbnYk3\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12cb3307f00b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4823542,"size_decoded":719909,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28000)","md5":"eefc171209dadaa5304285affe5c5bab","sha1":"53d821b7363ada0ac8013e57ec6794092f68713a","sha256":"8983cddb2f7d97bff0012412d0f8bcb3e175d85db338f4d7934ccdb0e2eb48c2","sha512":"c326d2e14c359f0367724cbea3970aed03522a68fce8da41324ad4be3867b5dbf5462286a9c954e878ab9be9b96a7f2a2943d761ca39729a61fd16cfcd6cee43","ssdeep":"12288:HfK8VyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AvVyh:Hy8PwEeW5AMZFEeW5AOPmEeW5Agr","tlshash":"982512f50469145f18938cc1a2592f2aee6d3b53a801c2ee2ffd19d36fddc489522b8d","first_seen":"2026-06-28T12:30:47.027625Z","last_seen":"2026-07-01T04:57:30.0248Z","times_seen":5,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/favicon.ico","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:57.489Z","timestamp":1782649797489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:29:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 22 Jun 2026 21:07:56 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 6\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBLmA9Ak81m2Tvm9W%2FrsAaxahinCgSAQsfk6RBnkvBQbZXvFWuSsm71XDDZahupRNxFELqn%2FMsbmyc24PLUvzjsjOj4cbWUU7vqr2QdPou%2FLc1ruWm4bnabVcyN8dWmfHH8%2FhCOZ\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12cb3325f1cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4822623,"size_decoded":716998,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28000)","md5":"eefc171209dadaa5304285affe5c5bab","sha1":"53d821b7363ada0ac8013e57ec6794092f68713a","sha256":"8983cddb2f7d97bff0012412d0f8bcb3e175d85db338f4d7934ccdb0e2eb48c2","sha512":"c326d2e14c359f0367724cbea3970aed03522a68fce8da41324ad4be3867b5dbf5462286a9c954e878ab9be9b96a7f2a2943d761ca39729a61fd16cfcd6cee43","ssdeep":"12288:HfK8VyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AvVyh:Hy8PwEeW5AMZFEeW5AOPmEeW5Agr","tlshash":"982512f50469145f18938cc1a2592f2aee6d3b53a801c2ee2ffd19d36fddc489522b8d","first_seen":"2026-06-28T12:30:47.027625Z","last_seen":"2026-07-01T04:57:30.0248Z","times_seen":5,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend-main-proud-frost-1362.fly.dev/notify-visit","fqdn":"backend-main-proud-frost-1362.fly.dev","domain":"backend-main-proud-frost-1362.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.125.20","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:30:02.154Z","timestamp":1782649802154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fly.dev","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 23:22:45 GMT","end":"Sat, 19 Sep 2026 23:22:44 GMT"},"fingerprint":{"sha1":"A7:FB:64:85:FD:0B:7E:8D:92:53:6D:A8:77:B8:9E:8E:DC:28:EE:70","sha256":"F6:3E:15:49:6D:97:94:61:45:C9:E5:D5:CC:21:C8:3F:12:DD:2E:35:14:DD:9A:B2:21:40:85:69:53:71:9B:19"}}},"request":{"raw":"OPTIONS /notify-visit HTTP/1.1\r\nHost: backend-main-proud-frost-1362.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rewards-threews.app/\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncontent-length: 0\r\ndate: Sun, 28 Jun 2026 12:30:02 GMT\r\nserver: Fly/866e52186c (2026-06-25)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KW73AKEYY70QNF2TBQP9GD1J-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":400,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:08:22.549436Z","times_seen":16915052,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":10,"connect":8,"send":0,"wait":59,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"backend-main-proud-frost-1362.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T12:29:51.192Z","timestamp":1782649791192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12cb30b682bb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"5481c7d106492189cc8d4c7070f6994d","sha1":"e5f3ceaf933c7494d75443924a1e8d393d546da6","sha256":"01413323187ddb1c315545de70353e5675a8ff1a5694b00825d6bdb8a12be2b1","sha512":"c93dc19ed8c34ae085ee92a9cdc6b6a958c0d27f0a89afce737fbc96a8def605b72f8b79c50c278df79cc496efe23cf9d766cd1dc7a463249526ce44317bfdf0","ssdeep":"","tlshash":"72a012c56190ed26c1490632c1540620f8301043010201340053c9150491e44c794e43","first_seen":"2026-06-24T13:22:31.212346Z","last_seen":"2026-06-30T11:05:20.493886Z","times_seen":57,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.5301248463596061:1782648019:Hy_AH77llHHFfHzj44XPhJfPl1_X41F4cOD-QFyifdA/a12cb3307ce3b4fa","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:58.183Z","timestamp":1782649798183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.5301248463596061:1782648019:Hy_AH77llHHFfHzj44XPhJfPl1_X41F4cOD-QFyifdA/a12cb3307ce3b4fa HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13249\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nCookie: cf_clearance=90yFec18N1M31DwhGTdYOotHNU0Z_b19GhLA7wBWEQM-1782649797-1.2.1.1-u8EpHcdxdeVGLAouxi1s4JTh_O81khlRfglNq2C4Ce3o43UJjL.GS6PJgCCq4eW6eui28mNMuJ8Kay4Skx99YB9dxo.yM_jmM5Jz8sfLOHNw4RM9Kqoh9z_8kNs_Ms2WDz1YlqcBGDf8Hnk7kHM88IBP6mv1dt.430gFPOS2jJoEo7mer6Ki65AdqBAUY_ZUTsZ_1kv2bx6hAGFwL030nh07jDsqQxgjzKEYFZN_SQS34PQNC5sFAFIbnOVo_abOQDQH19WkU.saq7WAPhvaLLTWhyyadQcI0Us5BX8py.zlwYhgNE.ja4JjpVQgZfqhfJLJ2PDwFU_IxoDUN.11X9mZHC01vKLbfJbLKyKe7GUUSa75LKJgN4sQSA37sEjRvaZbV5wj2Ea0FtYhjv0HubLVHSatk_0dde_y_YQyOtaeJA.dzRc.LSvJU.ZXGy5vJdn84rNt7BxG6PlZSq0ddg2PnbYCARfdTZpRBjFgfvTk5a_3WOgUKm_u6V9wOhMs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: PWCppa/AD77RRmQ/5XEtdGjbZtXWVC9ybP1OF5C8Zzxu1onTUHviUD3gmxf/GEWEoYASlgc55nYwgTIH9j17Bi0V5ysf18TLmzTulA36NX3upugLfKUwfPeU6go3SOE2WNhbkKQ/mwYJ4Kha5jryKD1nmMYODdzgrfEPbJyRt8tXr3RJOSjYHrQ00S37WJbO3cnLmKR+Hm1n8ldLd23H3tv8WhOSv7J1DuhH7ZwPwSeLZmHQMrXjuKQOFnfswJoQsgsITANKZdImU+c32Icdag==$z86UGuCzhj3RCOhGNjz+zw==\r\nset-cookie: cf_clearance=yOYlKOsEdZdQ3WUmu8VhQ3v_f.fvDGm0_XRXGBAbDLE-1782649798-1.2.1.1-WLpKmEfbGXfzeApzkIhXYKZ2hme5ENoyhqzYUrrdEtNj9583VnVSEhLMpvj.J3a_UPcCH5Qa7SOPDKkCNSEia6Z8dVx1xHdFngtkYO6KtAQRCGfejZNS_ZS_bJYFd87dCN_koE9IFXwV5RL6_VCXsygo7r57p7q1jnzk.01ub0cpAAIxyIu.shdyP7ViGe2RQppDRlfQUiHoCyIzbmbsvELmKxWcuotpHwHt7vP.y_t9UsoUzBVRmm045nhUOsWr91j_EUISl4.FlHfm7.5WobukLtzW8Pw_UwCVUBPTUqBuox6EYGzU.FuPSuO2OauKV_o5RO3LtwpHfHK5Xxh63xBl0lzhiovbeLYfILczyPq_7JaNP.I3W7NUT0382VaYODBpr7f2juiGo2KIH.0Unh.rN2ALKpYGUjUo85ADY73ujsel4iKOdFonSUV.PEoF; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=rewards-threews.app; Expires=Mon, 28 Jun 2027 12:29:58 GMT\r\ntiming-allow-origin: https://rewards-threews.app\r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12cb336af74b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15761,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:08:22.549436Z","times_seen":16915052,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.5301248463596061:1782648019:Hy_AH77llHHFfHzj44XPhJfPl1_X41F4cOD-QFyifdA/a12cb3360f67b4fa","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:59.280Z","timestamp":1782649799280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/25e6c66701a0/0.5301248463596061:1782648019:Hy_AH77llHHFfHzj44XPhJfPl1_X41F4cOD-QFyifdA/a12cb3360f67b4fa HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13257\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/frame.html\r\nCookie: cf_clearance=yOYlKOsEdZdQ3WUmu8VhQ3v_f.fvDGm0_XRXGBAbDLE-1782649798-1.2.1.1-WLpKmEfbGXfzeApzkIhXYKZ2hme5ENoyhqzYUrrdEtNj9583VnVSEhLMpvj.J3a_UPcCH5Qa7SOPDKkCNSEia6Z8dVx1xHdFngtkYO6KtAQRCGfejZNS_ZS_bJYFd87dCN_koE9IFXwV5RL6_VCXsygo7r57p7q1jnzk.01ub0cpAAIxyIu.shdyP7ViGe2RQppDRlfQUiHoCyIzbmbsvELmKxWcuotpHwHt7vP.y_t9UsoUzBVRmm045nhUOsWr91j_EUISl4.FlHfm7.5WobukLtzW8Pw_UwCVUBPTUqBuox6EYGzU.FuPSuO2OauKV_o5RO3LtwpHfHK5Xxh63xBl0lzhiovbeLYfILczyPq_7JaNP.I3W7NUT0382VaYODBpr7f2juiGo2KIH.0Unh.rN2ALKpYGUjUo85ADY73ujsel4iKOdFonSUV.PEoF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: IpstjR3c+l7ECLReOOWjaaephVbBVO6xk8DKRNgv1EiyVbtxhsLX1uSFSCLPQTQ35F7fL11p11U0od+22+DzGiXeqe6cFYUCD4YaDS/hr415RlNpzmM00FkoTl9fY+1R2IlfbUsHhbMpdAhMj9PRHEYYTwB+YVYsoSugW4F9n6hxVZXFFuXBowYn/zVG8LwRxaomKR69Z/7xXWG05goji7wDv9ngCuks5/hNnTNF9OUhRE7phe3nDoMbFy9F8QwamJwudMCRJ+GIXdxVNCpUyQ==$gaDCuhRxBem3DX4MxFZkPA==\r\nset-cookie: cf_clearance=24aYnqJH6bpw5k0XDQXHfF4LWTawLZUpqtPT2b0imyM-1782649799-1.2.1.1-ee2V6_ua12xM1qgk74nMIjzORbSHp.6Ro5LU5cBfWVfqQF_TRdSv9cO_iZx.1qKlcyOu8coVg3heSamYiu_9JBYNwVBF3Q3V3PjsOkv2OtzOsLPRkq_tqwW2MtkM9wPYWREXWMPSeKpneED5XqaVbaPTiKoxq.WBhUpamhfZP6ZKJvUWiDyyx8uXRF4R6nCtU.DP0Bv_zWrDsDCwyRsZteMe_utCr0DhBuEYpBJwUoJrN7ygs46NxaDhfRmrSGm0gjzEMaobdhJt7ti0QFGhcHCTIfLVGX8Dt8dEKwYPYU4tAfBXYaOfVpm6ofBytVrkh.bSWSnb.hMYHB25pgIizz2f_tWldvi2Ebrlb_.mRh4ZE_U33kI_rK2lT9rvW6N7rcGJMkmVSAzz8mfCqs7RZUWvFzvZJjg6ZbrGln7moBab_D755dn8uBy5tFg9JtH4; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=rewards-threews.app; Expires=Mon, 28 Jun 2027 12:29:59 GMT\r\ntiming-allow-origin: https://rewards-threews.app\r\ndate: Sun, 28 Jun 2026 12:29:59 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12cb33d8844b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15715,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:08:22.549436Z","times_seen":16915052,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/favicon.ico","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:51.020Z","timestamp":1782649791020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 22 Jun 2026 21:07:56 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=4,i\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnQfy0O7sKJRRBdctKtKTb%2BpMJzmHGUuygG72lzVrRYF9sPJInqse8vLZSHtNi5G979%2BRjmgUvOPRgPIIER8QECITmD3qqS2tsbJneeC%2F52nV5Z56bDPATRfCWK3JtxG3czKdP8p\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12cb309ed23b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1406809,"size_decoded":258879,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28000)","md5":"eefc171209dadaa5304285affe5c5bab","sha1":"53d821b7363ada0ac8013e57ec6794092f68713a","sha256":"8983cddb2f7d97bff0012412d0f8bcb3e175d85db338f4d7934ccdb0e2eb48c2","sha512":"c326d2e14c359f0367724cbea3970aed03522a68fce8da41324ad4be3867b5dbf5462286a9c954e878ab9be9b96a7f2a2943d761ca39729a61fd16cfcd6cee43","ssdeep":"12288:HfK8VyvXIBDreWk2fWVW5AfVyvnXBJreWx2fWVW5AsVyvX2BDreWy2fWVW5AvVyh:Hy8PwEeW5AMZFEeW5AOPmEeW5Agr","tlshash":"982512f50469145f18938cc1a2592f2aee6d3b53a801c2ee2ffd19d36fddc489522b8d","first_seen":"2026-06-28T12:30:47.027625Z","last_seen":"2026-07-01T04:57:30.0248Z","times_seen":5,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claims-three.ws/favicon.ico","fqdn":"claims-three.ws","domain":"claims-three.ws","tld":"ws"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:57.615Z","timestamp":1782649797615,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claims-three.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:08:22.549436Z","times_seen":16915052,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/","date":"2026-06-28T12:29:50.993Z","timestamp":1782649790993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://rewards-threews.app\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12cb309cb030daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22080,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":7,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a12cb30a4f38b515/1782649791472/0d1f70cd793cb24762a1963cb4669017b6b7dc2d20c492bef8eb365810dca080/QQcq5291XK8pXQh","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T12:29:51.929Z","timestamp":1782649791929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a12cb30a4f38b515/1782649791472/0d1f70cd793cb24762a1963cb4669017b6b7dc2d20c492bef8eb365810dca080/QQcq5291XK8pXQh HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sun, 28 Jun 2026 12:29:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gDR9wzXk8skdioZY8tGaQF7a33C0gxJK--Os2WBDcoIAAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxDKbk4RYZyL6XnTRyMLN4wCsxvmJhd3ftOd8yAXrz8VqFgtlvnKMefvXRO4zaElaSrpOMszh8KAW9Dsx69eFsAosPK4nvwsvfiyP6ZyhdxPLGuhjTi9yUrWzzkcXpKUD5oZ63WixlXmHZg-DGy34XBTBEDLpaBfa5nJjJuMdHFzFB3XZ4lKatFdK8sSGfXMAsUy10RQd9wnzBzarw_8QPnkBlqzJ4ZJmbO7eJ3Jx6rUKm0EsteVSMi1W_3UgNTuDSFntFLT7ivnApWTXp1kSxFIe5bwCn-1tnm7qDWHa8Q6WW3qloT-zXcLq1G6N4vNlnIldiS3oejrM7UI5IuMAFwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIA0fcM15PLJHYqGWPLRmkBe2t9wtIMSSvvjrNlgQ3KCAABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIA0fcM15PLJHYqGWPLRmkBe2t9wtIMSSvvjrNlgQ3KCAABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a12cb30f9bf7b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T15:07:14.031186Z","times_seen":474561,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#phantom","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.278Z","timestamp":1782649798278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=6zn3DzlGwpdxRGx3CwQsyfH4ekRw0PwQo.ln6QF_gMI-1782649798.3037703-1.0.1.1-gn9LjyBznrqvBHmJ.uruxPmTaxud6yvdNWuOItbN0mWhXZMqtcHT3nUHC02ib6GmpjLlKkFKCaZTbMs1HkRKdolrtdrYhfrD.VNQQAs8QeLO2ciMrWLTZwm4uFHZ3HZE; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Sun, 28 Jun 2026 12:59:58 GMT\r\nlast-modified: Tue, 23 Jun 2026 16:01:11 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 419326\r\nexpires: Sun, 28 Jun 2026 12:39:58 GMT\r\nx-static-request-id: 0R21M665TY7ABX38\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"0338e8231f6db1f81784e63861cb71a6\"\r\ncontent-encoding: br\r\ncf-ray: a12cb3376f112efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2161826,"size_decoded":974740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2884ab29d7a8170c45a1635a4630a3ef","sha1":"7702691075ae34db711d26f2b3f8d6db943ba686","sha256":"c1e4bf60638258e762333e377702f2d4e4fc90a960780859085bcc840205d8a4","sha512":"0b71d62f863c1cedec2f14de3da5f7da7d5cf250ce2d7847e75b0422a6c7a0ef60c7adf5fbe12fcefc0df8e965442f54f417bfa192a4dba6d01889a36292f733","ssdeep":"12288:8HamqgPgRaujhzJJuDeCNqY8Gi8mwXynxliFCOWYAoF5fAF0q:0PnujhzJJuDeCNqYI8mwXGxligOACf7q","tlshash":"4b2508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-22T15:05:26.838489Z","last_seen":"2026-07-01T04:57:30.013348Z","times_seen":159,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":57,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag/favicon.ico","fqdn":"jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"172.64.144.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.288Z","timestamp":1782649798288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jup.ag","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:40:57 GMT","end":"Sat, 26 Sep 2026 10:40:54 GMT"},"fingerprint":{"sha1":"81:FE:9B:56:FC:19:66:40:FA:F0:B7:7E:C0:77:A3:74:AE:0A:EB:A4","sha256":"73:BF:C9:BB:F6:2C:74:2A:72:C0:96:EE:70:1D:80:6F:34:71:D3:48:80:53:2F:A9:AE:09:32:A5:FE:A1:F2:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rewards-threews.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:29:58 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\naccess-control-allow-origin: *\r\nx-vercel-id: fra1::s9czw-1782649798349-37ab7f991cfb\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors 'self'\r\netag: W/\"894055736131345b87cd0f54d8257b56\"\r\nlast-modified: Fri, 26 Jun 2026 10:53:48 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\ncf-ray: a12cb337696b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":9669,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"894055736131345b87cd0f54d8257b56","sha1":"3b651d55f3213dae54bdded5a602cad7bd5338a2","sha256":"78439633e0407e3f89ac47d1c083bd7cb775fb89b0e4614e654a8499898c178f","sha512":"c1f08df2717a0a0a788f3e7504d1ef421401942f361a888f2711445dbb5f729929f7e6f7dd15b20172ffeded49ac8fbdcd76cf13269ebc78b265f6a5453bb8f9","ssdeep":"384:YPOFLcHuFJzvDzCmi6hKw/J74811WpK3Dpu:TFQuomi6hPJ74811WSDp","tlshash":"1f622a45eef61f66c4648a3addf3a246697c90e0be17db074311b2423202af15bd34ee","first_seen":"2025-10-09T06:48:59.404401Z","last_seen":"2026-07-01T04:57:30.021526Z","times_seen":121,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":1,"dns":2,"connect":14,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:58.423Z","timestamp":1782649798423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rewards-threews.app/\r\nOrigin: https://rewards-threews.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 12:30:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: HEAD, OPTIONS, POST, GET, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://rewards-threews.app\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BOMBuZtIPCuKM%2BVRWnFXVX9YpkkWnmxcpXfueydPCWy8pLpzc68eotWvwmlG5hhulsjBeaOMldpccwBKeEpOtdlDH5qahpc%2FlB43cwipaeJMrrhndzmuGqP\"}]}\r\ncontent-encoding: br\r\ncf-ray: a12cb34ddd4e5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":2107,"mime_type":"application/json","magic":"JSON text data","md5":"fee884643757958e5be493db8cd2095c","sha1":"ddc4ad9e3d30b91adf07eb888c6f47114f01868b","sha256":"37aed3f4f87769751f888cee6b1df3a0f6ad6490b5d3d4147f3d54716b3669dc","sha512":"702bc6bb94c3a243ed86c5593838ed331942c301cb532276b653f48036bdc5f6c5e56bee1f4fc6afcef6a6b21413171afa4c2821e170649fefe71036f3e9085f","ssdeep":"","tlshash":"6001df68e8780f7b9cb8135870786817113422175e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-06-28T12:23:32.636045Z","last_seen":"2026-07-02T12:57:11.743364Z","times_seen":147,"resource_available":false,"data":null}},"time_used":3704,"timings":{"blocked":0,"dns":11,"connect":18,"send":0,"wait":233,"receive":0,"ssl":3442},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12cb30a4f38b515/crncPzFJqB442tcPd_0KzU6nH_KFCW42uvC2CX3nhY4-1782649791-1.2.1.1-P0HQhiQLmKsdRhNvqIaizeDMS4rGoH7TBFdoRfjUexvLyVrS_Y5hMGrqmEoIGSyR","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T12:29:53.029Z","timestamp":1782649793029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12cb30a4f38b515/crncPzFJqB442tcPd_0KzU6nH_KFCW42uvC2CX3nhY4-1782649791-1.2.1.1-P0HQhiQLmKsdRhNvqIaizeDMS4rGoH7TBFdoRfjUexvLyVrS_Y5hMGrqmEoIGSyR HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/t4nz0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: crncPzFJqB442tcPd_0KzU6nH_KFCW42uvC2CX3nhY4-1782649791-1.2.1.1-P0HQhiQLmKsdRhNvqIaizeDMS4rGoH7TBFdoRfjUexvLyVrS_Y5hMGrqmEoIGSyR\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 88418\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 12:29:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: AtF036qwk6ifU7tkYBFUf1hukM5My4qxtHXsCBOg5UPv7KIIavb30ptvHDgbjnMW$swKda0AOWZzjox7z0mBScg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12cb3167a67b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34352,"size_decoded":26201,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34352), with no line terminators","md5":"7495ac817598b420d3fd58b5f586a193","sha1":"2e827f6395ad4e0922fa254eb07c7feb0744e8f5","sha256":"d38aeb14afd629406bf3e4b15268494f2de46630a09889b840a03926e09a1514","sha512":"e50e669d8f8729c283691de16cbabdb5de722e0163087ee874a1b31c83016f0c0ff3399bdd61a38e6cb917a2b6be797c43acf673c582c1ccb88c5589e903fc75","ssdeep":"768:7ZF9GHHGIDvqvyokldtkrUkSodWt4KJ9IexnpEDZ8hlruaTV:7ZwGIDv2StkrR/ofnVpEDZ8hlrueV","tlshash":"3af2f13f7a2c7b9f16b717bfc154abdad84582d9d0a050f60b582a07e0c0f0b069899f","first_seen":"2026-06-28T12:30:47.061365Z","last_seen":"2026-06-28T12:30:47.061365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rewards-threews.app/cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js?","fqdn":"rewards-threews.app","domain":"rewards-threews.app","tld":"app"},"ip":{"addr":"172.67.210.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rewards-threews.app/frame.html","date":"2026-06-28T12:29:59.172Z","timestamp":1782649799172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewards-threews.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 20:11:53 GMT","end":"Sun, 20 Sep 2026 21:10:39 GMT"},"fingerprint":{"sha1":"26:53:45:F7:1C:8E:88:43:8F:85:F0:47:EB:B9:55:DB:36:D1:41:B4","sha256":"2A:77:E0:08:DA:6E:32:10:18:9E:A7:03:8B:44:87:13:6C:5C:B3:9E:F1:A9:8C:65:F2:92:CB:52:51:62:FD:C7"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/25e6c66701a0/main.js? HTTP/1.1\r\nHost: rewards-threews.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=yOYlKOsEdZdQ3WUmu8VhQ3v_f.fvDGm0_XRXGBAbDLE-1782649798-1.2.1.1-WLpKmEfbGXfzeApzkIhXYKZ2hme5ENoyhqzYUrrdEtNj9583VnVSEhLMpvj.J3a_UPcCH5Qa7SOPDKkCNSEia6Z8dVx1xHdFngtkYO6KtAQRCGfejZNS_ZS_bJYFd87dCN_koE9IFXwV5RL6_VCXsygo7r57p7q1jnzk.01ub0cpAAIxyIu.shdyP7ViGe2RQppDRlfQUiHoCyIzbmbsvELmKxWcuotpHwHt7vP.y_t9UsoUzBVRmm045nhUOsWr91j_EUISl4.FlHfm7.5WobukLtzW8Pw_UwCVUBPTUqBuox6EYGzU.FuPSuO2OauKV_o5RO3LtwpHfHK5Xxh63xBl0lzhiovbeLYfILczyPq_7JaNP.I3W7NUT0382VaYODBpr7f2juiGo2KIH.0Unh.rN2ALKpYGUjUo85ADY73ujsel4iKOdFonSUV.PEoF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 12:29:59 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12cb33cd83db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19701,"size_decoded":9205,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19701), with no line terminators","md5":"1001609b4e24d9638b52f79ef2a6773a","sha1":"41a4f2ba7b1f7d21298e412423521040c4637657","sha256":"db5ae4f1b42914db3148f4277bb3caae6a015145910c515f001011d0691fb83a","sha512":"ca3ab1142beada44dcdf54e0d3b51e3d7d3162d2b58ac01145760b3bfde8899c278f4ac21d2dd86373c19bd23cc2bd0fbf8999cd3cba248cf6650c51526393d4","ssdeep":"384:PNzpNV60YHPrMjkGDdnM3S1hyATr8+jbXNIYp9RZhi5xVQWG/PkC2TIWmM4wgl9P:PNNorhGDdnMYHHB3hiRC2T1f4wgl9uA","tlshash":"b192e7c5f8ecb05a033324f4456730d6b2afed90345d5848c731a6b4b892bdda6abe4c","first_seen":"2026-06-28T12:30:47.063023Z","last_seen":"2026-06-28T13:08:41.122986Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rewards-threews.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}