{"report_id":"8490936b-8bb8-4e6d-9a4b-2b2fdb14a661","version":0,"status":"done","tags":[],"date":"2026-08-20T06:39:12Z","url":{"schema":"http","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"title":"cashback-reward-offer.live/","dom":{"size":13918,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3560)","md5":"2749c84cc268e098635677f161d5387a","sha1":"fe4ade88108bdf2bf6e87fc1059093d77bf70302","sha256":"2a83d5866475dac7dbddb7f68e9f3dc7e3d04d8f171e768bdf5ed9eb84f906d7","sha512":"e7f9329148b4c8aae73144d7b0d9cb4416fc7781bd9d88e7554e3097dcddaf9c94692a53b3cf60b1e92f4e59a212f81a744f9c4882622bcbe744e1b1ae438468","ssdeep":"192:Z+LC8PKBkDdrdTboR8ROEH8e3fuztHJ61CpD1ykzq8f1JYOAiI4MqS9UMVqqwXED:Z+uIDJUe3f0i1CB7DYBDGMVOERx","tlshash":"12522a19aab71025555781b077eba3196a72c003c509dd803afca3d01ffda6698b7bdc","dom_hash":"domhashaceb9e97a4be7d10285039adfc2b8c69","first_seen":"2026-08-20T06:39:13.177634Z","last_seen":"2026-08-20T06:39:13.177634Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-24T06:39:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cashback-reward-offer.live","ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-20T06:36:15.133902Z","last_seen":"2026-08-20T06:36:15.133902Z","alert_count":7,"request_count":7,"received_data":402664,"sent_data":3638,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dfee7a43663eb3f4579c9583283ca62","sha1":"6ba313d351a7b72309c656d7ff9bf172fb1c46b5","sha256":"d202f3eca00eff2ba5701f2146a2f7fc2419e4ac41c32ac1ca1c8aeb905b1097","sha512":"ea7e74ec24eb4d3048fba0d8563993e4b26c822e6ee0b9a062bc09c08d12b49373b5aa2a851b9f37970d6d6bae5067c677c57b47e4e73f770860523ed8d3baab","ssdeep":"","tlshash":"77d0970e10b460280f69047a853eb1a83862022b2a0a8801081c80d44838b0a41da9ac","size":222,"data":"","first_seen":"2026-08-20T06:35:34.451378Z","last_seen":"2026-08-20T06:45:26.56368Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fb545131715fcec51cbe70ad80b8ae4","sha1":"e61eb78d42b06f94628484da7c3de22ddf4d4e36","sha256":"eb77a1803bb57bd9a605472db83f9aeaae5a64dd7d3860e673ad072876f4ff75","sha512":"a4b69e806d604b55ecacb5ae82d1db5b67d64eb50a3367e86958cec0649a6f5b7aabba9ee6fe689403e52212e04e878526edca0c5f67047e368c51a13f528267","ssdeep":"","tlshash":"bec012207f68061412c70661be85115212a9b411b306d51aba65663697c7d9df12b5b1","size":184,"data":"","first_seen":"2026-08-20T06:35:34.453984Z","last_seen":"2026-08-20T06:45:26.565242Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c8f0bd813aff732f1e8bd8292818e28","sha1":"fff4328f17a7200258b7ba792d5f225f51be4226","sha256":"0b10722236cf4965ffa81a2646b1e3dd2b8b56ccdfce15b813bd61111153607b","sha512":"10d4ed9eb6fc9f8bbb3f58bf4dd91093dccf5f863827da667deeb25c30499cbd5a64c15380b531fcdc114bb237765f0e76efe1c21efe66aa15a97cfe591c3c1c","ssdeep":"","tlshash":"a6c08c81b1b2329cbf4142390e90821800c3cd12a4480b0830946010897123a3ab8ecc","size":141,"data":"","first_seen":"2026-08-20T06:35:34.45682Z","last_seen":"2026-08-20T06:45:26.566562Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa65973b0b5f81aa3682aaab26d5d928","sha1":"c32336c9a8f5731d42eb13407bfc8f6197122039","sha256":"3a24c70097fb3ed19b5bf8558de4a528b1bbef3384fa8165bb513e0502fd616c","sha512":"ab636441db137fb41fa83902abe955d7830a40c7d41ea843bc939328c90c6433a2dcf3f92dd5cddea25bf8fedbfed6c6167a904ea9f9ca789c95a86d7c88b4e8","ssdeep":"","tlshash":"df11dc286ba701a06dbf94f353d9232920728213d10ec6043cdcc3d88fedd22605dbe4","size":901,"data":"","first_seen":"2026-08-20T06:35:34.459287Z","last_seen":"2026-08-20T06:45:26.567627Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e7e686f5224573e1ef2520941e6d154","sha1":"8725823c29620e0908fc27b974df1e4d32e0efe7","sha256":"51f835aa2a9d131b824d69d6faa6c7217589f716555a17acdb52b00be10e1f8b","sha512":"7a1b9dde20edbd447c0cf5a9f9fbdddc7838be882f7b0b483916086403498287788f66b64de0238f1253b05929da32da7532b17d0e66a2b70c650f05b6cc184e","ssdeep":"","tlshash":"d170000002023220038000308020c3a02cf88020ea022200020b880000c080c0082802","size":21,"data":"","first_seen":"2023-03-09T08:07:13Z","last_seen":"2026-08-20T06:45:26.568551Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ac2c470cd6532c6df6a9ac965641155","sha1":"6c497d7bd35d20959af0e5ac42f492c7b43790e8","sha256":"beee84b0271f784f5f274f71eb03938c278f944aeb6a3e141f1bd43f158d83ab","sha512":"d2ae50871fd4a00fb7fe62f7fe6a0d75c3f2a889dca3c9d1531945829b7092c4319c8c4f6dac1557169ccb0ee919b7b9ba74b80fae684d9ed2f14f48f85445bd","ssdeep":"192:NH8e3fuztHJ61CpD1ykzq8f1JYOAiI4MqS9UMVqw:+e3f0i1CB7DYBDGMVl","tlshash":"04e1f82eb9b734755597e265a75fa211ee3281030804fcc0babd47902f7c66688b3f9d","size":7321,"data":"","first_seen":"2026-08-20T06:35:34.466593Z","last_seen":"2026-08-20T06:45:26.569675Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca3bf30066f6339b36ee79d7a687e997","sha1":"93b253ef9aced3bd381778991d7ad87e77dcfffe","sha256":"6b3d00d6c87dbfab78de8db4b931e708416729c65411ac9762d98799bb5909bf","sha512":"fc2aac65ae6832fa20d552b29c7bd87cfd952a77f1d816637e08f76901d22571e6cf0b4f104d9e41e854ab33ae58ab7e973ddcaea4a3a50061e89b5d5cbcd532","ssdeep":"","tlshash":"5721951cf2321480258321986b7f141904319407bd58efa977cc83c90fa6c2ab5b7fde","size":1356,"data":"","first_seen":"2026-08-20T06:35:34.469441Z","last_seen":"2026-08-20T06:45:26.57064Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Amount this session:652","filename":"https://cashback-reward-offer.live/","line_number":33,"column_number":11}]},"http":[{"url":{"schema":"https","addr":"cashback-reward-offer.live/img/11EWEFDGF.jpg","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashback-reward-offer.live/","date":"2026-08-20T06:38:45.425Z","timestamp":1787207925425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET /img/11EWEFDGF.jpg HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashback-reward-offer.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 06:38:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Aug 2026 09:26:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113596\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113596,"size_decoded":113845,"mime_type":"image/jpeg","magic":"PNG image data, 1166 x 484, 8-bit/color RGBA, non-interlaced","md5":"f1d5ddb5ba4f448b6f6533b5bd7521c9","sha1":"8a3845a363be9eec7342683609572c5710991bf6","sha256":"bec82597518004eff165183e88fbfd377bb12d2b9ea531734dabf9ff391a6161","sha512":"684796602ecc7fecff1efc942a8c3ca9f5f43495b59aa35781567ff8c9f02d9fec976d690f7df4c86e0a0fa2040590835e8f89249e306c6ec32151682ff347ee","ssdeep":"3072:HRqC9+aWr8wKbSRmjOfwxrQBfSJKilEFab:xqC9A8wrojOYiUhl0Q","tlshash":"1cb3124d4a3ac7cbdb53b6bad58b5d66258a75778080408374dc6f6b8b9bcf10cd3085","first_seen":"2026-08-20T06:35:34.443702Z","last_seen":"2026-08-20T06:45:26.556018Z","times_seen":4,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/img/22EWRTEYU.jpg","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashback-reward-offer.live/","date":"2026-08-20T06:38:45.427Z","timestamp":1787207925427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET /img/22EWRTEYU.jpg HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashback-reward-offer.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 06:38:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Aug 2026 09:26:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82441\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82441,"size_decoded":82689,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 677x469, components 3","md5":"611e57cbf8fffd9cbd39bbeb65939933","sha1":"ccc75f9bb31536ed6311ed5320ad3668400eef90","sha256":"f8f28ebcb93c2d8aee95d189520cab4f55ecb9300e9fc1a162375c67e4984328","sha512":"cd11e502db261a6e9545368dead7722fa0a2a81c55acbfc6b577f0644b1f197be67e0fd01364f4cce6fbed59d817c823518c2ce74e36ebced5d21d2687078bde","ssdeep":"1536:tC2+n2Ag8R5KHwcbSMUn3TGuan2XUd8/C3qBUwuezvaNpsczHMpk3:tC2+nQU5nNMI3qutkd8/XsezvaNnLUs","tlshash":"b18302b5ee53e06dbccf18a93829a5d88ed87b086dcf58faedb24b5cc01536d5250438","first_seen":"2026-08-20T06:35:34.446235Z","last_seen":"2026-08-20T06:45:26.557764Z","times_seen":4,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/img/33ETRTRET.jpg","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashback-reward-offer.live/","date":"2026-08-20T06:38:45.428Z","timestamp":1787207925428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET /img/33ETRTRET.jpg HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashback-reward-offer.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 06:38:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Aug 2026 09:26:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 167559\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":167559,"size_decoded":167808,"mime_type":"image/jpeg","magic":"PNG image data, 996 x 396, 8-bit/color RGBA, non-interlaced","md5":"4a4b64caffc14d4cca221e8aead96a1a","sha1":"e3bd4003441728f66cd784e725163da90adcf87b","sha256":"de1cbec5d64f24ce1228996f86152add966d3fd7ab6a2026dcd2083b3af1f63d","sha512":"95f0f0d1e27385fe801b1d3a300f42724a9639ef5579ea039b069381ccf5386b20dac1c6b469c15561c1aa28f2d9e7781a57dd55746cd5cecc213bc1d20a79ae","ssdeep":"3072:tfMSoanCl7Xa1DA+RjClKe6doOttpBq9M7nSd+7Y1DkoCVlk6NR9vvLAGptz:+SBCl7XeDzZClKe6d/tNq9Mmdy2mlk6T","tlshash":"c0f312f624d1ebc659f6643719dabfc60f0f970627aa1093174b822e6ea2d1cdd4b403","first_seen":"2026-08-20T06:35:34.448718Z","last_seen":"2026-08-20T06:45:26.559203Z","times_seen":4,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/img/2.jpg","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashback-reward-offer.live/","date":"2026-08-20T06:38:45.543Z","timestamp":1787207925543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET /img/2.jpg HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashback-reward-offer.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 06:38:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 13 Aug 2026 09:26:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19905\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19905,"size_decoded":20153,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=9, yresolution=122], baseline, precision 8, 300x300, components 3","md5":"dda6d435d5fd33aeadc915d640e781c5","sha1":"1135eea250510448e1df20657025b944e4fc77c0","sha256":"f3b68b644b017cf83f61351842b864f47bf714291639eff2641b38e48c1515bd","sha512":"01230bb4211311f033b2e831d42408cbafcc88b6c78e0f2d927eae64889f23f34fd770f4165a246259f79c2c64525f614130a08a0f2bc292f368ad26bdce86ff","ssdeep":"384:AZxTlOnHOrHXVSv6eztAAF+u5rBW35zvSm3A35jzPvAoGFiSrYbdPTn8b:ALoHCHF66E9+AWJzvfA39QBYbdbO","tlshash":"5792d07b7fa4228bdb0e1338d58a6b06d353eab2e825697ce57746714707cc24d58183","first_seen":"2026-08-20T06:35:34.433226Z","last_seen":"2026-08-20T06:45:26.560661Z","times_seen":4,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/favicon.ico","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashback-reward-offer.live/","date":"2026-08-20T06:38:45.897Z","timestamp":1787207925897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashback-reward-offer.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":796,"size_decoded":984,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-20T08:04:27.905833Z","times_seen":53650,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-20T06:38:44.868Z","timestamp":1787207924868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.3.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14004,"size_decoded":6970,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3560)","md5":"f3219067fd14bb44d41baf6bb7e42ba1","sha1":"b50fdd2b6f72dcab687a824304a6fb6db3944a03","sha256":"07a2fab0646abbd051aa87814890730c406f404e4151405fc5bb24a24be2eeea","sha512":"bfd65f609ff136b0774565b55023ccb26b110189598009cb7489653baa5a20daac052ca0b4440f2b8d997b4225dcdd7a3e06b01d941f5820308a784a2aaf2873","ssdeep":"192:Y+LC8PAkDdrdTRqR3SEH8e3fuztHJ61CpD1ykzq8f1JYOAiI4MqS9UMVqqwXETgu:Y+u+Dwoe3f0i1CB7DYBDGMVOERt","tlshash":"71522929bab71025155781b477eba31e6b62c003c509dd8036fca3d01feda6698b7bdc","first_seen":"2026-08-20T06:35:34.438517Z","last_seen":"2026-08-20T06:45:26.548811Z","times_seen":4,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":3,"connect":106,"send":0,"wait":118,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback-reward-offer.live/style.css","fqdn":"cashback-reward-offer.live","domain":"cashback-reward-offer.live","tld":"live"},"ip":{"addr":"54.39.160.85","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashback-reward-offer.live/","date":"2026-08-20T06:38:45.420Z","timestamp":1787207925420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashback-reward-offer.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 09:04:25 GMT","end":"Mon, 16 Nov 2026 09:04:24 GMT"},"fingerprint":{"sha1":"F0:D7:5C:A1:27:A6:CF:EE:CE:CE:20:32:F2:ED:3F:D6:91:0B:56:5B","sha256":"B9:A0:7A:83:4F:2A:A8:9F:0A:86:8A:C7:6A:4E:FF:B4:8B:3E:B2:5C:C7:6B:B3:04:64:D8:B0:F8:5B:A2:E5:E1"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: cashback-reward-offer.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashback-reward-offer.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 27 Aug 2026 06:38:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2026 09:26:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 622\r\ndate: Thu, 20 Aug 2026 06:38:45 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2353,"size_decoded":1089,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8af9319aeab66be909bc7ca297c0e21e","sha1":"36a4f2fc9cc203a528d6648ac77901a7ee8b960f","sha256":"0e2e794e175d61bdc3925e11bd771be3cefe6586532c35421860c2f0b01523cf","sha512":"b555dc4946301aa6052b7eaa7b3fab095fd7223236633b0a3302147ef8e1b003e67f9795331c347e4c5f49597e2d4b97692d1d6c5a3e0175a7666ff9722e6f27","ssdeep":"","tlshash":"bd410f8244022009773f7355abfa4b58d67e80838c8b5a6c3753614c4fa91988babbf4","first_seen":"2026-08-20T06:35:34.441379Z","last_seen":"2026-08-20T06:45:26.550423Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-20","alert":"Sinkholed","trigger":"cashback-reward-offer.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}