{"report_id":"7fcb3a6b-d952-495b-884b-512baddec7e8","version":0,"status":"done","tags":[],"date":"2026-06-09T15:40:34Z","url":{"schema":"http","addr":"rewards-plus.net","fqdn":"rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"http","addr":"www.rewards-plus.net/","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"title":"Site en construction","dom":{"size":19240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1129)","md5":"b0ec3ed4a55ce11416a2d41a61411d99","sha1":"04e95f0a3d196d7b21ddbd9e996e9dedffe72ac4","sha256":"06d1859ad12b9d2d24661baa832dcd7aedf37ca0b9d4bcaa6f7fe4d1875a31d0","sha512":"dc75e5fddb2e43b564a59b7c44b24566f3516602719e8a0ddfd2b23b7205b392c74a9746c9310cee788dbef2621b90671d7ae9fd9f1258abda6f8c31d0e01bb2","ssdeep":"192:6Uq4U6TbVzZmBChnBBlb1ibyUaOGRXuUNOt1Au600aqhAnHV6J8ajRX1XhL:6UJ5FUvGx3NOt1Au60NUW16Gmx1Xp","tlshash":"2582ec504c7b581281b7e8d01aff872934d64af6fa831594fbac23ad4bceea2705115f","dom_hash":"domhashd96e1c87684dfcbfd5c4aac045bdfac0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rewards-plus.net","fqdn":"rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-14T15:40:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.rewards-plus.net","ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2026-06-03","domain_rank":0,"first_seen":"2026-06-09T15:40:34.554362Z","last_seen":"2026-06-09T15:40:34.554362Z","alert_count":12,"request_count":12,"received_data":98093,"sent_data":5411,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rewards-plus.net","ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":270,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.rewards-plus.net/","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a19e401bddb1856959363cf71e6c51d","sha1":"7215c83e13ed81d16259a1d3349ea5b742e489c8","sha256":"2aa0aabb4e85273bb2d948e24d7c230744b164d7c975a3497ffb14ae26547f20","sha512":"bfd6149053baff64e79eda27a168d5e2b7997de951391adae92b3e972bb92c39d9ecc3719f10d5f1665868a05839df88db9d92a25f2aaaeda6310722da4d4c69","ssdeep":"","tlshash":"a4a0220200f03aeab03830803e3cc38e023ae0be8c88c33eff0e83008080882883c802","size":76,"data":"","first_seen":"2023-03-07T01:32:09Z","last_seen":"2026-06-20T22:54:06.272784Z","times_seen":1281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/font/lato-light-webfont.woff","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.488Z","timestamp":1781019612488,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/font/lato-light-webfont.woff HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31020\r\nlast-modified: Fri, 19 Dec 2025 13:50:04 GMT\r\netag: \"6945580c-792c\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:804E_D5BA2105:0050_6A2833DC_FA8EAB15:5A6D\r\nx-iplb-instance: 52217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31020,"size_decoded":31329,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31020, version 1.0","md5":"3ca8f8927a96e6dc4a4b21b11f86bc84","sha1":"406bf88841aa95925212df8ca2a1a7c359ecf409","sha256":"5692dbb764fb48c923196089846e59edd6a8302c20e026118d786d2747f2da6d","sha512":"846a04a9280d0f67cc64ba3da253cf6340a93fffa6e78eecfd46c417a4f60fe9d5b546f73c329278cfac741285b0f7f4522b92be150610f9a4082d7d07a13bdf","ssdeep":"384:on9sP85gTaJhTfaoTKkcQAnczmOjzazL3O1yHbl/KZ06Pimy5BGqGmYkZJX8mYbZ:onMxkcDDzfbl/xJ5BGqDDPp5IjhHQ71A","tlshash":"50d2f149af119f85d085b53962cc0e0a67ed993bf2828ed291c25c52ce8b34be03197f","first_seen":"2023-04-05T10:00:50Z","last_seen":"2026-06-20T22:54:06.265126Z","times_seen":1560,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":23,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"rewards-plus.net/","fqdn":"rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T15:40:12.219Z","timestamp":1781019612219,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: http://www.rewards-plus.net\r\nx-iplb-request-id: C3407698:804C_D5BA2105:0050_6A2833DC_F8956E82:4983\r\nx-iplb-instance: 52193\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T04:29:44.336912Z","times_seen":16598908,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":4,"connect":22,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rewards-plus.net/","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T15:40:12.273Z","timestamp":1781019612273,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T04:29:44.336912Z","times_seen":16598908,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T15:40:12.308Z","timestamp":1781019612308,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: text/html; charset=utf8\r\npragma: no-cache\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-length: 19229\r\nx-iplb-request-id: C3407698:804E_D5BA2105:0050_6A2833DC_FA8EAA4D:5A6D\r\nx-iplb-instance: 52217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19229,"size_decoded":19531,"mime_type":"text/html; charset=utf8","magic":"HTML document, ASCII text, with very long lines (1129)","md5":"1acaae32e1df4a991f28d2c83cf8ce7c","sha1":"7bbe688854df10540aea6b98895ae43755d53b92","sha256":"b413311db5a556a82a6a7e5398bf29ec7f686021b273aea8f0d9effced7c9f7f","sha512":"db71992790f24f61958fbac7b77f1b9e34e5ba8341074a9c2ad52332da5536d4f5dc4a240af4ac4cecfae7471d5414581844a9542453ab27ecdc7c9c1c913631","ssdeep":"192:KUq4U6TbVzZmBChnBBlb1ibAUuwGRXuUNOt1Au600aqhAnHV6a8ajRX1XhP:KUJ5/UlGx3NOt1Au60NUW16Bmx1Xt","tlshash":"5782ec504c7b581281b7e8d01aff872934d64af6fa831594fbac23ad4bceea2704115f","first_seen":"2026-06-09T15:40:38.268127Z","last_seen":"2026-06-09T15:40:38.268127Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":26,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/icon-traffic-cone.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.478Z","timestamp":1781019612478,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/icon-traffic-cone.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1139\r\nlast-modified: Fri, 28 Nov 2025 15:58:21 GMT\r\netag: \"6929c69d-473\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:805C_D5BA2105:0050_6A2833DC_F9FE0E30:51EA\r\nx-iplb-instance: 52243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1139,"size_decoded":1446,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b30b0b3e41430a01ad8b5a938a1dd47b","sha1":"040141338c2d5b6a35eae5d57bcd3598f3d39f76","sha256":"c5c8586b1fb47d8cb65beb281e4fce1d2562b99513aad191d1efd9953cba36b6","sha512":"5eb610e030ba29fcef1691113842fa4e9b71931e618e4d4bb2955c5a7143b4c8a74f1866ff816067fcbe9bc6c155099638949c3aa1d79f7c535d2c08d1ae1478","ssdeep":"","tlshash":"9821f9c76a105f27e8b4d8f6b1510118f83a76e0a2204197c5b27d3a846ecd06871dd4","first_seen":"2023-05-30T04:57:40Z","last_seen":"2026-06-20T22:54:06.265691Z","times_seen":1203,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/icon-speech-bubble.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.483Z","timestamp":1781019612483,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/icon-speech-bubble.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1529\r\nlast-modified: Mon, 01 Dec 2025 10:53:55 GMT\r\netag: \"692d73c3-5f9\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:806C_D5BA2105:0050_6A2833DC_F9FE0E3A:51EA\r\nx-iplb-instance: 52243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1529,"size_decoded":1836,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"49be1e121c9463470a471fbddabcd6e5","sha1":"587be48cd4aa2b26bf63077351cf973783a43e6e","sha256":"82e005fc55703025752e00838896aa4fea047d00ee178df30d36fc7bb8d205ba","sha512":"811dededa0354f6af181a70e7f758009c33b516089e2747bc0facbd1005e925898637e9ee42453972dee88e75af868c8929a7ef1079d094d27424779127f5fed","ssdeep":"","tlshash":"fe31d5998717aaf40ba932915534aa0360ed74f689269d5bb24083319e2809c843378b","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.269325Z","times_seen":1547,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/icon-user-support.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.484Z","timestamp":1781019612484,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/icon-user-support.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2762\r\nlast-modified: Fri, 19 Dec 2025 10:48:47 GMT\r\netag: \"69452d8f-aca\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:807A_D5BA2105:0050_6A2833DC_F9FE0E3B:51EA\r\nx-iplb-instance: 52243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2762,"size_decoded":3069,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"15be1f96bc96be66b67ca7ee4119359d","sha1":"2dba17007ff3eb067fb4a413d513f0b2eaef4c11","sha256":"917db1372f9e23d38b094eafd8f71ce376e8038e456591c60ac969af7647929f","sha512":"766913f20fcbcb30e0f30f0a022721ba1416d3b6f1f843cc866cba1cdd6769279d2e244f3841fff53653b96aa856a6e810fba2c12d3cb55abef15fa49d778d7f","ssdeep":"","tlshash":"e5514e5f675971b0b36f6225447395f8583c651f8e1f95e80b0fe91c24500c976931c4","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.270242Z","times_seen":1548,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/icon-app-gear.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.485Z","timestamp":1781019612485,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/icon-app-gear.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1798\r\nlast-modified: Tue, 16 Dec 2025 11:21:46 GMT\r\netag: \"694140ca-706\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:8060_D5BA2105:0050_6A2833DC_F8956F8F:4983\r\nx-iplb-instance: 52193\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1798,"size_decoded":2105,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"86cc10012af5e99545efe294888eae17","sha1":"24d7078caca4e8b0521564894c9db9adf3df9cd1","sha256":"2f68ef6162f850a7cc927b7f08785af03e00de3fbf180c51792c9c7b3a3ef04b","sha512":"4b6d2429a52fe89a260a3ff3d6330e650fe6a7a8484656ddc79536a3974742cfe2fe2c5040d088b450803d809bf2ede7f6ba15501172dd54248dee93b45ac6d5","ssdeep":"","tlshash":"2531296ba1c0e162e2750234756e797d58f42128627eab2b2c1cf9cc95f041c28c1e2b","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.271378Z","times_seen":1635,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/favicon.ico","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.570Z","timestamp":1781019612570,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/favicon.ico HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 11722\r\nlast-modified: Mon, 01 Dec 2025 10:54:17 GMT\r\netag: \"692d73d9-2dca\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:804E_D5BA2105:0050_6A2833DC_FA8EAB65:5A6D\r\nx-iplb-instance: 52217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11722,"size_decoded":12034,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 53x53, 32 bits/pixel","md5":"425852055853bdf564ba3affc5708954","sha1":"54db9bda21f6ea759c7b5763ff6c06d62d557a33","sha256":"73366da0141f74ddd220ea53c03c7be935b9794d3befe7b360e0e8fe5de0987a","sha512":"59e59213462d484ebb8fa4f2d8ead9440f2096c2319f63bd2520bafa9a7dec8934536013b4c911f4e5a150767ba9cab831587d9261f52b6d1ac5f87a400b6a41","ssdeep":"48:2TiNFIyF5uq7cPrRwy5lulMFK9zIrvnKZs:oUwOcPrH5lul6KqzKK","tlshash":"a2327f84a886cc14f9a80978da4d92fc1acc6d18e83480d76492bf8b3fbb16f74c1c1d","first_seen":"2023-05-01T22:03:04Z","last_seen":"2026-06-20T22:54:06.271973Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rewards-plus.net/","fqdn":"rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-09T15:40:12.082Z","timestamp":1781019612082,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T04:29:44.336912Z","times_seen":16598908,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/logo-white.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.474Z","timestamp":1781019612474,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/logo-white.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6719\r\nlast-modified: Tue, 16 Dec 2025 11:21:47 GMT\r\netag: \"694140cb-1a3f\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:804E_D5BA2105:0050_6A2833DC_FA8EAAFC:5A6D\r\nx-iplb-instance: 52217\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6719,"size_decoded":7027,"mime_type":"image/png","magic":"PNG image data, 622 x 100, 8-bit/color RGBA, non-interlaced","md5":"29a8eaec4838a3e7eec8a3c0d3759b9c","sha1":"ead87317dde636bea308c16c738c569f4cbed864","sha256":"5a3568e06f260913fa30a263ecbb6a14c99d6c1b6c26c58d80371ea383adeee2","sha512":"0aaa848831034c057773a2cf4b395fd4950fe5ff73bef13216e0beb8d919d549fa1d0a29d5a0bf18b4ce8d364044f327aa90ec69fab089737e3d390730d09415","ssdeep":"96:WVED92Cj1zZxdy/idR4n2FKUu7KOn+lAyhUme0oPfBj+HAlVHf5jDrvrTCG:WwfjFd/n4LF+lA1VPlxvCG","tlshash":"b7d19f5e72f4315a5d6c58f2361d90c8ff4e05e90192cef901aa8b7d53c4392b2be1b6","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.264404Z","times_seen":1636,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/shadow.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.480Z","timestamp":1781019612480,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/shadow.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 3132\r\nlast-modified: Tue, 16 Dec 2025 11:21:47 GMT\r\netag: \"694140cb-c3c\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:8060_D5BA2105:0050_6A2833DC_F8956F73:4983\r\nx-iplb-instance: 52193\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3132,"size_decoded":3439,"mime_type":"image/png","magic":"PNG image data, 605 x 18, 8-bit/color RGBA, non-interlaced","md5":"7b79884ca8abd1652fdc34e6ba00733b","sha1":"606b37b4cf4a3431733f91f21f2c50d2f687db64","sha256":"2f28d568675b58fb13de6de981c27664a32f5107547c5472ec244cf6eae2bdd3","sha512":"14f0c73299fcea4be1ad25074b9c0e67f42943430d9d70ef8ef78ef614acd17805f18754bc86c37ba69e03c9540b5934b6e8202664b11d903731817467342730","ssdeep":"","tlshash":"55515d5df540a4068b89e7eca0ef603b60938a906cdc61e5544dc9fb8c909f4406eaf3","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.266366Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/icon-book.png","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.481Z","timestamp":1781019612481,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/icon-book.png HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1802\r\nlast-modified: Fri, 28 Nov 2025 15:58:21 GMT\r\netag: \"6929c69d-70a\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:8068_D5BA2105:0050_6A2833DC_F9FE0E37:51EA\r\nx-iplb-instance: 52243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1802,"size_decoded":2109,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"be3481f7afc5c2dbca75fa5d6b1f88e9","sha1":"8c0501f58dd92e1d97e7926413dd6feaec8361ef","sha256":"637db324eb40d00c2e2d24dbe715484e345da1a0df0187c105a8ae33f1c92f02","sha512":"d58677a9411543f1130a44f0d599301c901f073623e67deeb56fe2df60dea3e4ed699342a3ebcc852a971dcf854b0c62694e2cc43a8600f9882fddb8d7370358","ssdeep":"","tlshash":"2f312b91b3978858059f222007525fa0ce1a8049b18338952a08385a8aaa51c9a4d3f6","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.267028Z","times_seen":1636,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.rewards-plus.net/__ovh/common/img/transparentTriangle.svg","fqdn":"www.rewards-plus.net","domain":"rewards-plus.net","tld":"net"},"ip":{"addr":"213.186.33.5","port":80,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.rewards-plus.net/","date":"2026-06-09T15:40:12.487Z","timestamp":1781019612487,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /__ovh/common/img/transparentTriangle.svg HTTP/1.1\r\nHost: www.rewards-plus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.rewards-plus.net/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 09 Jun 2026 15:40:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 13855\r\nlast-modified: Mon, 01 Dec 2025 10:53:55 GMT\r\netag: \"692d73c3-361f\"\r\naccept-ranges: bytes\r\nx-iplb-request-id: C3407698:805C_D5BA2105:0050_6A2833DC_F9FE0E49:51EA\r\nx-iplb-instance: 52243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":13855,"size_decoded":14168,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"592508402103006b33bc89c86ffa14e7","sha1":"2c1b8c7e6cf887e57424cb3bc016aac148b08bdc","sha256":"222573ab81c8acc9ca102e72e72b74d833a9494e57bf49f5af5fb365183016d6","sha512":"c13f15ae65ab6bb01e60f7bec24c77e7b0beb1752dfbf53ee4eacd781063144c699b2f61ad4fec3032b64bae685ca5b2cda77711a4f8ab8e490869939008618c","ssdeep":"384:aXCp0FESt8cOro55N/qtYdYaMmQw1OnPu:aXCp0FESt8cOro55N/qtYdYaMmQw1Onm","tlshash":"fa52eef92da6094c68128502fbff6e135c3ce1d70d2c5491ba5d1b50bf334aaa8a73d6","first_seen":"2023-04-10T10:38:01Z","last_seen":"2026-06-20T22:54:06.267586Z","times_seen":1639,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":22,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-09","alert":"Sinkholed","trigger":"www.rewards-plus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}