{"report_id":"7c70fd83-d68d-419e-a57d-fcedc3fd0c30","version":6,"status":"done","tags":[],"date":"2024-03-30T19:00:41Z","url":{"schema":"http","addr":"fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"172.67.201.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"title":"Sign in to Your Epic Games account | Epic Games"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T20:55:33Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static-assets-prod.unrealengine.com","ip":{"addr":"143.204.55.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1998-07-01","domain_rank":46958,"first_seen":"2020-10-29 20:21:15","last_seen":"2024-03-18 19:23:24","alert_count":0,"request_count":2,"received_data":16215,"sent_data":953,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fortnite-rewards.com","ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-25","domain_rank":0,"first_seen":"2022-02-06 09:24:12","last_seen":"2024-03-26 10:17:09","alert_count":8,"request_count":8,"received_data":804970,"sent_data":4660,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fortnite-rewards.com/1/api.js?render=explicit","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"972737b48d685ef580a27a2ac7e9d12e","sha1":"68d6a13b416f9c0ac5a6bf484e002d8553b4b7b6","sha256":"cf4265538d3c3ad9f82e6e9e032172b2469c8c28b94b8448696b586881862bcf","sha512":"5977ee0e831befc00b7f11b7f91ffb0e27426d681ac15fde553d4ede139312dfb58c3cb3e3e8845f5d0befba75a1420ddf06873afe091a8fac8e8bc949bb4e57","ssdeep":"6144:swmeVrO8alRCWEtYf6VFxa2cHmT2/hYc9U0VXd:Woxal40/hYkU0VXd","tlshash":"4e844a99b615303546d762b6102f150ab337a56cb50b849cb678dce66cbc88e223ff7c","size":386644,"data":"","first_seen":"2024-08-20T06:39:29.776773Z","last_seen":"2024-08-20T06:39:29.776773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0da4845019e0d641244039e90744cbc2","sha1":"f51f2493d1d61cbfbec2c7d3a5b5a37600ef394a","sha256":"43bbd3b2e65faf67e1f077c3904c9f62d3bf1780fce16af5ea2883219b9eb0cf","sha512":"989ef3b2b167ad1765d0ab59fb6737654fa9188d904ef47632292acda6013d0b4b2a371170a3ab453646bb66a680ee507ee447a1e0dfe6a456b2cbf33158c132","ssdeep":"","tlshash":"5e213e0452080f3b8ade7df3e1dbbfcbb51054899949009611f69fad06617edac763ca","size":1337,"data":"","first_seen":"2024-08-20T06:39:29.80034Z","last_seen":"2024-08-20T06:39:29.80034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/static/js/main.f36f7d34.js","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c65f226ff63fe1a79068eaf539c49a84","sha1":"a941151f82e660bbb864d4cbba214f6a72983046","sha256":"ca1570f979cc12ed11196fe9e89d2572472047610a00af4b0ad8884f65031c66","sha512":"cd7fa52f0a831426baa16d96aeb7221842ed5f5f6c68078ca51b719fe4cf1e09d85382be0b3e8a079339d2abd816792c9e0602eac7de05f087859fbeb7f233c7","ssdeep":"12288:chJ4U+2B0U7/eJtZwpfDmuI2qazf2nfuxwEkHhLhN:chb/eJtZSqazf2QghLhN","tlshash":"e8b4c4606bd0b89c569bcf33772bb4edf02b086f7d880c6bd144fc90a995226e9e5570","size":528799,"data":"","first_seen":"2024-08-20T06:39:29.801434Z","last_seen":"2024-08-20T06:39:29.801434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static-assets-prod.unrealengine.com/account-portal/static/epic-favicon-96x96.png","fqdn":"static-assets-prod.unrealengine.com","domain":"unrealengine.com","tld":"com"},"ip":{"addr":"143.204.55.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.437Z","timestamp":1711825216437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unrealengine.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 07 Sep 2023 00:00:00 GMT","end":"Sat, 05 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"EA:72:01:D4:EF:E9:B1:F1:59:58:8B:4D:C0:EA:57:C2:C6:28:7B:BF","sha256":"F7:53:87:E2:39:40:06:66:F1:DF:57:30:0D:92:A7:D6:75:F9:47:7F:0A:AF:C9:C9:2F:19:8E:7D:2F:6F:BC:75"}}},"request":{"raw":"GET /account-portal/static/epic-favicon-96x96.png HTTP/1.1\r\nHost: static-assets-prod.unrealengine.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnite-rewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5649\r\nlast-modified: Tue, 13 Feb 2024 14:15:44 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 21 Mar 2024 07:32:40 GMT\r\netag: \"c94a0e93b5daa0eec052b89000774086\"\r\nvary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: E7aXsMPYB8ZbHD0u7t4RgHJTrr91KKsEhfjer3K0z20GXG17hC0kiA==\r\nage: 818986\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5649,"size_decoded":5649,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c94a0e93b5daa0eec052b89000774086","sha1":"cb4acc8cfedd95353aa8defde0a82b100ab27f72","sha256":"3f51f3fb508f0d0361b722345974969576daef2c7d3db8f97c4ca8e1ff1a1775","sha512":"f676705e63f89d76520637b788f3bac96d177d1be7f9762aeb8d5d1554afd7666cbd6ef22ce08f581eb59bd383dd1971896231264bc3eaabf21135c967930240","ssdeep":"96:84Mxtt+ydcmLcArg/rUE4Emr3GqW3B1cvRTA4jfrphq/uKQr7fdotvMeKiTZE3XM:84MxtcYgAcDUEvA3xwXcJocfdo2Qu3k7","tlshash":"0ec19dca9542e41c8b320001e10b5aa9d77ab3335959e7297fe0495430df6fc63e5f93","first_seen":"2024-03-05T01:01:45Z","last_seen":"2026-08-07T01:48:18.29764Z","times_seen":25,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":108,"connect":1,"send":0,"wait":2,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/1/api.js?render=explicit","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.003Z","timestamp":1711825216003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /1/api.js?render=explicit HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"5e654-aNahO0FvnArFpr9ITgAthVO0t7Y\"\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zPqSdlopKD1lUChn0PzTcbi0LTLwFous3RHKGQZUgS4GwhyPq6MX1EsLGmuXybWyTZ%2BVTXMCvFPDn%2Bijs%2FwzI%2Bv4dZXp4qwqEqlT4m1JWNju9T1uA8Z%2BoKTKSuI0TFDLADW6etPafQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca576ff8bfb509-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":118352,"size_decoded":386644,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41625)","md5":"972737b48d685ef580a27a2ac7e9d12e","sha1":"68d6a13b416f9c0ac5a6bf484e002d8553b4b7b6","sha256":"cf4265538d3c3ad9f82e6e9e032172b2469c8c28b94b8448696b586881862bcf","sha512":"5977ee0e831befc00b7f11b7f91ffb0e27426d681ac15fde553d4ede139312dfb58c3cb3e3e8845f5d0befba75a1420ddf06873afe091a8fac8e8bc949bb4e57","ssdeep":"6144:swmeVrO8alRCWEtYf6VFxa2cHmT2/hYc9U0VXd:Woxal40/hYkU0VXd","tlshash":"4e844a99b615303546d762b6102f150ab337a56cb50b849cb678dce66cbc88e223ff7c","first_seen":"2024-08-20T06:39:29.776773Z","last_seen":"2024-08-20T06:39:29.776773Z","times_seen":1,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/Brutal-Regular.85a5d915.woff2","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.465Z","timestamp":1711825216465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /Brutal-Regular.85a5d915.woff2 HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:16 GMT\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 06 Dec 2023 17:12:37 GMT\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"6c14-18c401dff88\"\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jUfklhizcMir0RnFwwy53ilJCi%2FMt%2FDlWOiZzaMUvnebFQkRjH3DXnUkd%2BL%2BnzVjE%2FWydcYkHYSBMd6Rz020Iz89eIClAZso8Wo9khVgJ26iMYQAPyhWq3LLlZl5OxD9OeunB%2FGJdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca5772eb9db509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37174,"size_decoded":37174,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27668, version 1.66","md5":"f316462183db46d15d54cbd0f6f46d11","sha1":"2646120f1906299d8b06e225994ec2c139f2d935","sha256":"0dc16582353f0865a704996f313adc747d8bdfea7a946ab7f39b4d35172ba9ee","sha512":"a1efceb65b18b9c23eba3cadbe17fab37768201101e69660fcdecbaee886aedd4ca5fc5ea606ef368886de39235db41cd6cf66947fef0b29309dbe367246d2f2","ssdeep":"768:6xFhDLaJVsyxJNOX0LJpxQDXxR0xlGBaNOfdHhSbCtK6xwwueMuEqH0BcZr0Ezhm:IZIVpOX0ljmXxR0DGQk2F62n5uEqZB01","tlshash":"d2f2f1d726c40590e94f4f3d7d25282cded67ba693847d8910a3db3edfd884b32a91a0","first_seen":"2024-08-20T06:39:29.778822Z","last_seen":"2024-08-20T06:39:29.778822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/epic/counter","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.479Z","timestamp":1711825216479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"POST /epic/counter HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nContent-Type: application/json\r\nContent-Length: 22\r\nOrigin: https://fortnite-rewards.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\ndate: Sat, 30 Mar 2024 19:00:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Vn47Udj%2BwYux22wqeza0R7CKPkO0K7uKFlG1YqQytCeNPtcvRo%2BY8BIl43ktLrVVgOgHbGUsh48lA%2FtYhxomgi0dETXQAwkjz3Tsa4rTzAJtugPEvjn0KlLMkUHiblKfq6FqLeDepg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca5772fbabb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":null,"data":{"size":16,"size_decoded":16,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"dac3510b7572d5d0a91c5cabcfffb808","sha1":"8f3fde801270c1046ce441e8a9df9a01d5142102","sha256":"4f32d280a95889bb861167e00c1b95a773707eb98dfe2cc1736bf8884a2259f5","sha512":"9cc87310f8da4d1a644433fac8c253fff04bed9f81ab0be68e7653f0a1dfd40e2a1d1257426600ab364d252ebcc81f80b9b9507ca17681f40fb099a582e660dd","ssdeep":"","tlshash":"5a700003000000a2c0002000020a2e202200002280000a00820820088a208003082002","first_seen":"2023-04-05T09:52:32Z","last_seen":"2025-04-06T21:27:31.835668Z","times_seen":13732,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/static/js/main.f36f7d34.js","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:15.999Z","timestamp":1711825215999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /static/js/main.f36f7d34.js HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 30 Mar 2024 15:47:26 GMT\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"8119f-18e900b56b0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j%2FR1pMgUauJzUILTO9oTvrgKUVRHTNByqz5VSE1ZAfk1NZOA6IDUcPWIOhCwEELYCS0cEyiRS8t4lKeT%2FIX3NTIuNDhaAxWtj4cbbzoy5wwX3nqclN%2B5gfOVuaYns1nmTSsf8jIl3Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca576ff8bdb509-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":528799,"size_decoded":528799,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T23:46:09.409911Z","times_seen":17894690,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/epic/init","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.481Z","timestamp":1711825216481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /epic/init HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"d6-q6JdyYqUkJqq6q7ceDBu+9YSqzU\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aG4%2FNJiQ5%2BeaxMPXzkBXDHAmo6kyFMyAxtB2%2BwGM3DCzYSF2OGcIJPOhw3niCMuDz1RKoL3Em6LmSlxRyiy6FXG4m7qrth%2FRxvLGEjWebcp%2BgMphMacWIBs0pNb%2FrXZsUY1TZfI6Tg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca5772fbadb509-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":214,"size_decoded":214,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"2a644fb34693ea923c3e0030e993d3f3","sha1":"4f75a517e21edc3d2d05a9aa1bbd81b0980d3b70","sha256":"e496d4b5a922a1885987da20f16586b0f1f7dff415e482b6b5bae4afbf00e5e7","sha512":"07feec44ad2c4abe037f77d2b29f7e6bb0a5df6b72f30725ac6e0683ee3f9b75708353a698f85947b430275995961f4d18b537e24edbcb9cd1a1ac77b5d43a92","ssdeep":"","tlshash":"3ad0a7670cd9cf5de24e715004394d1626e860ea50702055522c5408adaa3047097448","first_seen":"2024-08-20T06:39:29.79048Z","last_seen":"2024-08-20T06:39:29.79048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1962,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/Brutal-Medium.df2da420.woff2","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:18.457Z","timestamp":1711825218457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /Brutal-Medium.df2da420.woff2 HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:18 GMT\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 06 Dec 2023 17:12:28 GMT\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"693c-18c401ddc60\"\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5A%2FLAYQOw0dE0f3NnyW99zKXMwj%2BjQAY%2FeAPbRzCemq3J7%2BKUGAlodakX7vaxBJ0zJw5LzpDrwwIiKKul4Wq4J7FjV3JaPi03JVJV%2BiHdj0%2BOk%2FFzbIfwZIPYgw3Nctp5st1XRGGyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca577f5f23b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26940,"size_decoded":26940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26940, version 1.66","md5":"5f601a4caa6f187bd35621b49fc8e2bc","sha1":"ae65341139eb24daffc5c7dc8de0dbf34dc7ed12","sha256":"bdd55a68f73148a791895019a8da139e3b9b4e01b061ba31318359c20bcacc35","sha512":"4cd56ef9bca8ea4a6246b2de2455dee06dbbdafa4cd06a6ec8b73cdec8bdf77fbfc7c5ba9968ac5aa5062797cb32c7abf1b8e3a5d8800ee4eef8de779428b167","ssdeep":"768:HSFKtj9ABpdiXCRbcPcxbslA9m39Xs6z2HC2TX9s:HSFUIiXKgWbsO92t69s","tlshash":"27c2d07e5328ed54cbe00b751ec52269636d22b79cea90e341d9802cf32a590029f3fe","first_seen":"2023-05-19T22:46:11Z","last_seen":"2026-05-03T13:27:39.690815Z","times_seen":18,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-30T19:00:15.543Z","timestamp":1711825215543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:15 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nset-cookie: __ddg1_=yvazd5mwskga0WEyWfzR; Domain=.fortnite-rewards.com; HttpOnly; Path=/; Expires=Sun, 30-Mar-2025 19:00:15 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mEZ7q%2BO8XmhRBmUx6Y3MckPd4VmOo7OJfnWhvCIBjG25fJzaidU%2BwQrZ3AHJ3pKgk3Ug18GsV66k%2FO3rBegsWc0ypd%2FNehoHYkSas%2FMEJw%2B4lX1%2FLxd69RuCtIOPtHg%2FXeYnMo6mbQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca576d5a357129-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59613,"size_decoded":59613,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (49467)","md5":"a94bc8f779d056ce54b570818486d062","sha1":"0c69ed4f4b36fadcbc7b34a21dad1c86238fbbbb","sha256":"3233ef23d8b34f4c55d35309ad8bedf24f43db7cf182857d1a41349fe8bfb7f6","sha512":"8b140b139e45d94235dcd9392cd84397008850593126468ad217a04804bda7305d9311b18e315bd44a74f0fb05f35dd0fb6458fcb73f606ac3ea0e5c14295424","ssdeep":"1536:6u4j6bHZmcxGaGJE3EitakHM/Y3XSullTTLgEZNpm0Pi6E5l:1GaGJE3EitakHM/Y3XDBpo","tlshash":"7243b971c610111db1278c66e4d2fe4e71254412eb172eeeea336ab4ce895ef1b3235e","first_seen":"2024-08-20T06:39:29.797049Z","last_seen":"2024-08-20T06:39:29.797049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":36,"dns":1,"connect":1,"send":0,"wait":230,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-assets-prod.unrealengine.com/account-portal/static/epic_logo.png","fqdn":"static-assets-prod.unrealengine.com","domain":"unrealengine.com","tld":"com"},"ip":{"addr":"143.204.55.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.435Z","timestamp":1711825216435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unrealengine.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 07 Sep 2023 00:00:00 GMT","end":"Sat, 05 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"EA:72:01:D4:EF:E9:B1:F1:59:58:8B:4D:C0:EA:57:C2:C6:28:7B:BF","sha256":"F7:53:87:E2:39:40:06:66:F1:DF:57:30:0D:92:A7:D6:75:F9:47:7F:0A:AF:C9:C9:2F:19:8E:7D:2F:6F:BC:75"}}},"request":{"raw":"GET /account-portal/static/epic_logo.png HTTP/1.1\r\nHost: static-assets-prod.unrealengine.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortnite-rewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9394\r\nlast-modified: Tue, 13 Feb 2024 14:15:44 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 26 Mar 2024 21:57:46 GMT\r\netag: \"a0604fb708da00996d727b621ecac94a\"\r\nvary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: LTZTfTToKUT82-EFodeeDO-gSZArHGf31fu-HBBHrboPUnTTtsPDlw==\r\nage: 334951\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9394,"size_decoded":9394,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"a0604fb708da00996d727b621ecac94a","sha1":"d3cf2756fe77ca02558d0a468db1471e1ca22f6a","sha256":"35a1f821fe749aadb269649feef1a0c5bdb4be099d926212eafb169a12259486","sha512":"38ecfd73d2e5d0673c713984b4031cd79522cbc22ec8d9020430c58137443adaeefff4a8d31b19df57eff92cb0ae7669bf99f77e9f5e9f3f919f850b531334cf","ssdeep":"192:WSGPM1hTM7dDcmiik2OCcz0YbkUjDAUgYbbYE:BQMHg7xC72O50kkUfbgYH","tlshash":"2e12ae9b0f02be457c320a9889dba88d585495070521096bab3edf3b334ffbbac10c16","first_seen":"2024-03-05T01:01:45Z","last_seen":"2026-08-07T01:48:18.300043Z","times_seen":33,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":108,"connect":3,"send":0,"wait":3,"receive":2,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortnite-rewards.com/Brutal-Bold.402a3847.woff2","fqdn":"fortnite-rewards.com","domain":"fortnite-rewards.com","tld":"com"},"ip":{"addr":"104.21.44.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b","date":"2024-03-30T19:00:16.454Z","timestamp":1711825216454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortnite-rewards.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Mar 2024 19:35:21 GMT","end":"Sun, 23 Jun 2024 19:35:20 GMT"},"fingerprint":{"sha1":"87:F2:A2:D6:34:A1:E2:CA:A4:0D:7B:F9:CE:DE:3F:AB:59:62:BF:B9","sha256":"C4:42:13:E8:34:92:C2:1A:0D:5A:4C:88:AD:FF:D8:7F:FC:60:9F:A2:CF:56:76:CF:A5:18:7A:15:7B:26:0A:0E"}}},"request":{"raw":"GET /Brutal-Bold.402a3847.woff2 HTTP/1.1\r\nHost: fortnite-rewards.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://fortnite-rewards.com/?method=epic_identity\u0026security_profile=high\u0026client_id=c185c1fdfbe62d23367ddc505e98215b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg1_=yvazd5mwskga0WEyWfzR\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 Mar 2024 19:00:16 GMT\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 06 Dec 2023 17:12:20 GMT\r\nvary: Accept-Encoding\r\nddg-cache-status: MISS,MISS\r\netag: W/\"6a28-18c401dbd20\"\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1QR5Oz0C1hxNvssdAkC7uUCMBKGEpst2aSZFojvqntUZvNMc22filwiw%2BFybse1IAZpci8PZ7xgqkUJ4eThONzMEoHuQEHcTPHhv08b%2FKlaWaH7xidEFHpgxQunpngnRCBxZ8bi4og%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86ca5772db7bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27176,"size_decoded":27176,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27176, version 1.66","md5":"0dfc6422538b3d86ce582109b873e084","sha1":"bf006d690184b9253468f98193fe36fafe1cb5f3","sha256":"a6f0df6e385325b7a94aaf1005890c9c6d090205098efd6afc55a3e920d48e2c","sha512":"671138e08916868eb562c452d13a4a9334843abba75dbf6e686ee3a07770848b96b93abf06df15e666ecc29d9b0b4b153c3afa14ff1fb2175bf9fb89b15b1903","ssdeep":"768:g2p3Vws3GY0EGkg6ZZzS12niUBA8MC+9SZ031m:dpFGYikbZtOaARCM31m","tlshash":"51c2f18e23d897efc12565be6fe35e4957fc31009fcc8d2ab4da9764843e8e82509087","first_seen":"2023-05-19T22:46:11Z","last_seen":"2026-05-03T13:27:39.631075Z","times_seen":19,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-30","alert":"Sinkholed","trigger":"fortnite-rewards.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}