{"report_id":"7283df3d-6b50-4d01-b0f3-3902cc1e2da4","version":0,"status":"done","tags":[],"date":"2026-08-23T18:26:44Z","url":{"schema":"http","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"172.67.135.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"title":"Marinade Finance","dom":{"size":1252653,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2292)","md5":"ff95290d3846feda33bf34262387d456","sha1":"003abcdf55871c3696dcefe840c26eb90fbe4b73","sha256":"76c6165e602fb136846465cffcc366c4c19dd80b632e162ca59186bfbdb8342a","sha512":"88e705427c5ab87303d888dcbe961586f1cebdc610ef49dec1188ed1d05a22ccb1aac450cab59051016eade0b5c115ecfe0618aa1bd41f1278185cf4cbbafed0","ssdeep":"24576:aqrUNgmfHpmArjQl9MPFXwcJ4NLrCfbYKfLJIW04:xm/pm0eGXwcJ4sYKfiW04","tlshash":"2c4537578a1f61921c583dbb87da688da514e1838e47df88f6ce18e8dfee75d088035c","dom_hash":"domhash150c3230ef3056b7718bd9d81557f531","first_seen":"2026-08-23T18:26:46.8771Z","last_seen":"2026-08-23T18:26:46.8771Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"172.67.135.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T18:26:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"marinadereward.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"marinadereward.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"marinadereward.live","ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-23T18:10:54.591709Z","last_seen":"2026-08-23T18:10:54.591709Z","alert_count":10,"request_count":5,"received_data":3179898,"sent_data":2493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ca6968ddc9b5df44efc23a3b6932e5","sha1":"f4ba9d06e856cd8c58f6e8e16c66ba0d2ba243df","sha256":"f73b6d71a0924449eaba53093b0bd47639b61333d7c74a3a707eba645694e14c","sha512":"89240829ea0ebeb0d05c7d35d7efd44ebc4240704b97f1cd9c21e510b2fbf0ee59b2e96a828fdab661442fb7bf5e37774e21d6474c5d92f4e2983548461555b9","ssdeep":"","tlshash":"b5c0c044d1f44f700c1c00ff803011d83be0341d4461708dc3bc8c06e44cf821f98412","size":180,"data":"","first_seen":"2026-08-23T18:11:02.027865Z","last_seen":"2026-08-23T18:26:46.884489Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfe9686108153b46b0d58752fad15b11","sha1":"e0f5bd960553c878c422fb239d3e4f70e96eedd3","sha256":"4574a53a62feb7d8d3a806c4f4d51ff2e7fac56b99a67f879513ac92cc09b363","sha512":"742a65ab18bfee45e6945d15a960cd0c47ab5369ee5a208bb803ddd9224e85840c70c3e224abfa6c4e600b98c108009f71b33cccb10ca1510c619566a5e3410c","ssdeep":"","tlshash":"ef113826122632653c8eb0ee59b6dc4d7a7f100ae90960a0b59ed08d2b30b5544f76dc","size":977,"data":"","first_seen":"2026-06-24T15:00:49.972776Z","last_seen":"2026-08-23T18:26:46.885716Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebaf1756ec2a96c2f798141b538a0d32","sha1":"45d81aa4355bb0b7dd994fd939cd9f2ab6c6edc4","sha256":"9fa564f64d000772157b36c09f340ff8e943f0859c2adf9830b81dc2a487af97","sha512":"55e9a7e15a245db04010bd70e1095ee00500fe736c21c6370748933b18b334243b2ed04c0687ac321abc55567e7ff61f56908f40268a39395a67678aed3a5f53","ssdeep":"","tlshash":"66011289fc42b07696863228763bfa07517312251884a4335dfdc76fef32d87811368c","size":838,"data":"","first_seen":"2026-08-23T18:11:02.032767Z","last_seen":"2026-08-23T18:26:46.886892Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/secureproxy?s=%2Fipfs%2Fz1YCcF7SBbeBCjTpkDDddA939f7ed06a95d57c402b535343e1fa70%3Ft%3D1787509573002","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3ee7e193d8bab60a64afa59942e4fda","sha1":"96cbbcee3bed4ad7f508c04dc723c83d8a7311f6","sha256":"6f6432b937db10686e30362ca4ca1c72d978419bfa366a98419ac6006eeec8a2","sha512":"8e0ccac90eae63fbb2f3c2375e518040dedb8121bd4084c5e4db530305bcf6ff708f0fde05eda99c0070a0603594a330616ab16d2f7fec985eb5ea9792cfe6aa","ssdeep":"6144:ch5gDKrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csCq9NWCEiox3Ti/ESVPHSyyA","tlshash":"22d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","size":645584,"data":"","first_seen":"2026-08-23T18:26:46.881567Z","last_seen":"2026-08-23T18:26:46.881567Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"marinadereward.live/secureproxy?s=%2Fjmpd%2F","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marinadereward.live/","date":"2026-08-23T18:26:14.006Z","timestamp":1787509574006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marinadereward.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 03:57:07 GMT","end":"Tue, 06 Oct 2026 03:57:06 GMT"},"fingerprint":{"sha1":"69:6E:8F:BC:22:BC:9C:28:B6:88:76:97:F2:44:2B:72:B6:B3:4B:1D","sha256":"CB:F8:4F:53:4B:79:8A:80:09:E3:1D:66:32:63:BC:E0:22:4E:6C:BD:A1:CD:88:3A:3D:4F:D5:D0:1A:3F:80:38"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: marinadereward.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marinadereward.live/\r\ncontent-type: application/json\r\nContent-Length: 1317\r\nOrigin: https://marinadereward.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1317,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB1gIfAyEADwA-Ay4DKAD-AhkAAAIBVwMAAO8nhn2XtsKCAa6YqB3MtN6jQfzqMY0CAADit08y_iFLTSkbuX_G9XdcoWukPuHBDp0pSaRLdOtoGp-RJiWIpuzOtFLzNFUHby-5wNLdZr91Ek8WBjEnzeJnkU-ezkE5-gsi8MtAIuNC0VmgpL5dUv2bTrZRSKWtCZzBc285frhjkfTxB2ZTKPt02kl1BoZsDvJXW_CIT68kWpGr0oGkkVWOHHNDbeqPhf4gvz9OOUWCzDhOFpelajCEdq4cq7ugB7fC1I3SmJv3g4ve_WC0WQ4s-B2_0lGdHDqerAphtUYBUGx_tNcN961_Qp_Vpx-Dsg2kXYCtPlSyRR0IIhAl1mZ7aCdi1vt1uW1HMW24EPcf_ozVpqwb3LljpzF0TflT5yueQ7GjQRn_lm_1NjHRhiLM85fa0A5FKmWXi6DFPIlNgT4svrV6HKnTJCrXLUDUQnv_FCfqyosXg8A5nskZSIix-L2_8woYykzIzaGTntTsQFfgLmxZ078jKQ0z0dtfWJNF6nBv0VaFmEgbiz_02vURX3bNygzViO6q7z9iiNn1AwmHb7fUR1gSBLrt_awgRH8VUe3FfqmHFFgvQCYX7Bo-8KwEnNtkNLa3tzYLrRzuOGp5gdTSzrl_w-NeoZ1IrP3lsc85R8hPGAR3ae7hIOuhXwG6V69A9fIbm0CKwYcKV10ICJE7heY6toOegNvj99FVC3K295PlbuORWjbMiM3xURo-15HgEsZvnRLjhWmcvfEjZUZc6ff2O3zm2HSR3hEVMJPXHax9oxz1HU_4by-M4TGs9OogUP91-MoB6x2yztu7kRDCtTu8qzm0p5nlKRk8DRbBOW6dqXl1UPkPs7sdnPU-IpuHCmFmWyGKYrtl8aPJPBfAHu2lbSamzSzpw8SxC961qVN9l3oeSyHnnpShKeK8LPNS2W1DJOd9gqHU6tfVoADMIc-gme5-PPjOWdjrrau24VazbzF_Vy1Mx6Q8eqC6PgE8WQ4mTbrHeDu-L0otyUwzQqBEkLLKqpKUo3biPsM7wl3uL0UQz1futldnh2xEOjh82iNg5LyTd8B1OIxFsJr3QHcEK0vzG1eqn0T0kLcrFxkjG2KbY-b0LyNYmVgHYGMY48fM1cUOV8GwjoEkyGSkGfxPVauFmSFrF5DCEPOQfSfQ5TfYKU7fpjBCKVViSZLkpBOiYPv4WVQAOZIGTfayEhA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 18:26:14 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1787509634123\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 08/23/2026 18:26:14\r\ncdn-edgestorageid: 1445\r\ncdn-requestid: 6a2d82a1e257eb5f134af35e7a3469bd\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KouFV5fph4TFSvehBAqZUZ7Beokru3vLTzyXb1RzySKPllKxcw05eLVxUYsgC7rjiU%2BgXD9aooSOO9vBijx3gn%2F7Y7OXyzt%2FEYSthFykbFHyp2STblwOTBJNmPi7cp7sndS%2Bizmj\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fc2a159d1b5926-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3293,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T20:40:39.331699Z","times_seen":18061082,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"marinadereward.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"marinadereward.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T18:26:12.655Z","timestamp":1787509572655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marinadereward.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 03:57:07 GMT","end":"Tue, 06 Oct 2026 03:57:06 GMT"},"fingerprint":{"sha1":"69:6E:8F:BC:22:BC:9C:28:B6:88:76:97:F2:44:2B:72:B6:B3:4B:1D","sha256":"CB:F8:4F:53:4B:79:8A:80:09:E3:1D:66:32:63:BC:E0:22:4E:6C:BD:A1:CD:88:3A:3D:4F:D5:D0:1A:3F:80:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marinadereward.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 18:26:12 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 11 Mar 2026 21:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 951\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUUP%2BWPrsa%2BSXaJtYByS1%2BOcTV5ri%2BVQpjvBp1KWyGqjHhYyoMxWlw8o2b7O4jGH9cmiho%2BXMfKjTyxvD71mgv9q%2FET5tKn4lBlIdFkmOY7PmRzzu0hRRXJJXIGD554Ym03ss%2Bhl\"}]}\r\ncf-ray: a2fc2a0dead65926-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264306,"size_decoded":309251,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1886), with CRLF line terminators","md5":"89ae9ec34ca1e5f27707fcf8b94a2a3c","sha1":"bbb0b30444e8c713a830bf63470712c7d6e64a60","sha256":"e50e672e83b941031ed02ad04c797446e5f8b3981d24656c2c803f89cbd0082f","sha512":"14633021b1f2ea47e4a8bfe9758584b98cd24b65450f558742ea8d343659fbb76fbae3470256f0825e095ca8da15576338849858037377ef5b5cace4ab7d1be1","ssdeep":"12288:Nr3V9eHr3CUeer3zDeVr34yeMr3JRe1mfvP49omaH1tjQl+q/MaOXstsWabJq3sz:vRWDQcmfHpmArjQl9MPFXwcz","tlshash":"af254a178a0ba1952c753bbbdbe2684deb05b193ca439388f9dd14e4cffe2584841b5c","first_seen":"2026-08-23T18:11:02.021177Z","last_seen":"2026-08-23T18:26:46.880856Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":83,"connect":38,"send":0,"wait":42,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"marinadereward.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"marinadereward.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/secureproxy?s=%2Fipfs%2Fz1YCcF7SBbeBCjTpkDDddA939f7ed06a95d57c402b535343e1fa70%3Ft%3D1787509573002","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marinadereward.live/","date":"2026-08-23T18:26:13.019Z","timestamp":1787509573019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marinadereward.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 03:57:07 GMT","end":"Tue, 06 Oct 2026 03:57:06 GMT"},"fingerprint":{"sha1":"69:6E:8F:BC:22:BC:9C:28:B6:88:76:97:F2:44:2B:72:B6:B3:4B:1D","sha256":"CB:F8:4F:53:4B:79:8A:80:09:E3:1D:66:32:63:BC:E0:22:4E:6C:BD:A1:CD:88:3A:3D:4F:D5:D0:1A:3F:80:38"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2Fz1YCcF7SBbeBCjTpkDDddA939f7ed06a95d57c402b535343e1fa70%3Ft%3D1787509573002 HTTP/1.1\r\nHost: marinadereward.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marinadereward.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 18:26:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9d9d0-lsu87jvtStf1CMBNxyPIPYpzEfY\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=0DFcLiyz9YwUlPwW7NK-mg.js\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/23/2026 18:26:13\r\ncdn-edgestorageid: 883\r\ncdn-requestid: c7750f488348d431d24cc6972324897d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eikALAb5xBhdYJHuOsk2U90X7%2F3RtbR%2FYgVZx6KLCgLhljdegqE3ctPpETMNLwOUvMRl2kfP6%2FITp3KH7EY42PAIg04qaGrvYjkSkENopLuVfhILy%2FBlxbQzcYG0M98%2Fr0BGf2x0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fc2a0f6b2d5926-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645584,"size_decoded":142235,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a3ee7e193d8bab60a64afa59942e4fda","sha1":"96cbbcee3bed4ad7f508c04dc723c83d8a7311f6","sha256":"6f6432b937db10686e30362ca4ca1c72d978419bfa366a98419ac6006eeec8a2","sha512":"8e0ccac90eae63fbb2f3c2375e518040dedb8121bd4084c5e4db530305bcf6ff708f0fde05eda99c0070a0603594a330616ab16d2f7fec985eb5ea9792cfe6aa","ssdeep":"6144:ch5gDKrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csCq9NWCEiox3Ti/ESVPHSyyA","tlshash":"22d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","first_seen":"2026-08-23T18:26:46.881567Z","last_seen":"2026-08-23T18:26:46.881567Z","times_seen":1,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"marinadereward.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"marinadereward.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marinadereward.live/","date":"2026-08-23T18:26:13.021Z","timestamp":1787509573021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marinadereward.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 03:57:07 GMT","end":"Tue, 06 Oct 2026 03:57:06 GMT"},"fingerprint":{"sha1":"69:6E:8F:BC:22:BC:9C:28:B6:88:76:97:F2:44:2B:72:B6:B3:4B:1D","sha256":"CB:F8:4F:53:4B:79:8A:80:09:E3:1D:66:32:63:BC:E0:22:4E:6C:BD:A1:CD:88:3A:3D:4F:D5:D0:1A:3F:80:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marinadereward.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://marinadereward.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 18:26:13 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 11 Mar 2026 21:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 951\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIHMwDsbUEDiS21GzcdtAepySCZJg2dPMjkBLyJSUxWyjmieikHlDE03hlqvkK6UD9kgNVNEYCJzCAefKLfNYEGE9qgKB%2F9jxFZvqQHWxF445PcC45Klrfa%2FmxyP6KAfC%2BMbAKMl\"}]}\r\ncf-ray: a2fc2a0f6b2e5926-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264306,"size_decoded":309246,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1886), with CRLF line terminators","md5":"89ae9ec34ca1e5f27707fcf8b94a2a3c","sha1":"bbb0b30444e8c713a830bf63470712c7d6e64a60","sha256":"e50e672e83b941031ed02ad04c797446e5f8b3981d24656c2c803f89cbd0082f","sha512":"14633021b1f2ea47e4a8bfe9758584b98cd24b65450f558742ea8d343659fbb76fbae3470256f0825e095ca8da15576338849858037377ef5b5cace4ab7d1be1","ssdeep":"12288:Nr3V9eHr3CUeer3zDeVr34yeMr3JRe1mfvP49omaH1tjQl+q/MaOXstsWabJq3sz:vRWDQcmfHpmArjQl9MPFXwcz","tlshash":"af254a178a0ba1952c753bbbdbe2684deb05b193ca439388f9dd14e4cffe2584841b5c","first_seen":"2026-08-23T18:11:02.021177Z","last_seen":"2026-08-23T18:26:46.880856Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"marinadereward.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"marinadereward.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marinadereward.live/","fqdn":"marinadereward.live","domain":"marinadereward.live","tld":"live"},"ip":{"addr":"104.21.7.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marinadereward.live/","date":"2026-08-23T18:26:13.027Z","timestamp":1787509573027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marinadereward.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 03:57:07 GMT","end":"Tue, 06 Oct 2026 03:57:06 GMT"},"fingerprint":{"sha1":"69:6E:8F:BC:22:BC:9C:28:B6:88:76:97:F2:44:2B:72:B6:B3:4B:1D","sha256":"CB:F8:4F:53:4B:79:8A:80:09:E3:1D:66:32:63:BC:E0:22:4E:6C:BD:A1:CD:88:3A:3D:4F:D5:D0:1A:3F:80:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marinadereward.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://marinadereward.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 18:26:13 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 11 Mar 2026 21:50:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 951\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RE%2By1eEkKYjz2wNGR4ZgPkVGKlAYcSFwq0MLX9%2BJU5vBDjbIiwBg3ZCJfzaiLEloU%2F8EXNyjiZ9eAQFjUpcwIrjPU4WePJmqegipvVUKJpHKsyXZMcUxjtMsBTqik61Ztqgk87W5\"}]}\r\ncf-ray: a2fc2a0f7b305926-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T20:40:39.331699Z","times_seen":18061082,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"marinadereward.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"marinadereward.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}