{"report_id":"8c569598-f2ac-4192-a6ea-65f829228c7d","version":0,"status":"done","tags":[],"date":"2026-07-12T20:25:51Z","url":{"schema":"https","addr":"off750.com/","fqdn":"off750.com","domain":"off750.com","tld":"com"},"ip":{"addr":"194.145.208.24","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.rewd2026.shop/","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"title":"Complete Your Registration - $750 Gift Card","dom":{"size":15258,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7ac66d2ae7ab492b217667816a4fdaf1","sha1":"b43fd45c42e8dc6011f69e9927939554eee76f94","sha256":"3afca844244f3b9daa3994d57d6f3e3746383e3f6b929b99cc4f6e2e7009aac3","sha512":"84f4a1795e4f824751da2980e461bd2ef9fb0c230ff5c227494ad24117d67a54829dcb10f9d8a1a1288d8f5f261842207efdefbfc6917cfb311bc5139ed02dba","ssdeep":"96:nxky1hB9aGZbB1lR/l1R7Q3coEsEjt/6Hde5gfinF28/J2OHNaC/2EYO8vAPTpiP:eoHlJk0j5OWPmvAPNiL8g689t","tlshash":"b762336762f8673f215303d1e712b37a2ed5a153de0b1024757e06b86fd2d8add270a8","dom_hash":"domhash4f61c911ed0df14779b8f7bf4e6989ab","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"off750.com/","fqdn":"off750.com","domain":"off750.com","tld":"com"},"ip":{"addr":"194.145.208.24","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:25:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"off750.com","ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-07-12T15:44:09.861905Z","last_seen":"2026-07-12T15:44:09.861905Z","alert_count":0,"request_count":3,"received_data":12868,"sent_data":1731,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"www.rewd2026.shop","ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-12T15:44:09.866086Z","last_seen":"2026-07-12T15:44:09.866086Z","alert_count":0,"request_count":7,"received_data":901947,"sent_data":4034,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"flagpedia.net","ip":{"addr":"104.26.4.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-04-02","domain_rank":225394,"first_seen":"2012-10-30T23:27:34Z","last_seen":"2026-07-12T15:44:11.80953Z","alert_count":0,"request_count":2,"received_data":1958,"sent_data":1100,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.rewd2026.shop/js/script.js","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"343e5145ccbfccd5d23b1012be6b5d9f","sha1":"2c11c47ea380b182df8063eb47839028f3278bb7","sha256":"59e559f30014169bf66c2dace7bbf5e3ea7747ad5cda6a5bbbb464c65198c4ca","sha512":"f55782f8500042832c65353943d5aae07b60cab2b1c4b89d076eab1f585f559d6ccbb853c637e2e8713d188bf38a55027bbff64ae9c2b7bf735022b17f67f7b9","ssdeep":"","tlshash":"6f713fca311720f09bb321b3174b72867876505f6dc2f455b6de8a8c1fa879482e56ce","size":3640,"data":"","first_seen":"2026-07-12T15:44:14.475837Z","last_seen":"2026-07-12T20:25:52.83257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"off750.com/","fqdn":"off750.com","domain":"off750.com","tld":"com"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:21.290Z","timestamp":1783887921290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.za.off750.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 18:18:39 GMT","end":"Mon, 31 Aug 2026 18:18:38 GMT"},"fingerprint":{"sha1":"FE:7D:BD:89:AC:3D:FB:A5:D0:A6:9E:F7:87:D3:6E:EB:4C:D1:8F:43","sha256":"1A:A3:D5:8D:DC:DC:D6:64:03:15:A6:94:E3:B1:7B:46:40:C1:A3:EE:91:6F:72:E6:B4:90:71:EF:B3:97:B5:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: off750.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 20:25:20 GMT\r\ncontent-length: 11946\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncf-edge-cache: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11946,"size_decoded":12191,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4853)","md5":"47c9ef14d1b1975de9a480f031ec5c55","sha1":"2ab3c284706fa2c8cab185b28106460ec807feca","sha256":"d45e820afce2aa91456a46a13ed4233fb924c7bbf933b660300cb26b14020531","sha512":"a8e64cf37397919ab3f45a54fea29103d84c673ec3fe634e7d724d0e5f7a71a2dcdbb0ef082ecb8df9a5c2bc921914427a4201510d6485f59937f3bea645e670","ssdeep":"192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxzGjDkJe4sM0t50nAhsDJLY+3hwM:sXX+/DV7k/3FXsBt+nAoLY+3hP","tlshash":"2f32084dae9062b4f21703dd3bef295d1224a1c3640cc488f54d6de0af4e6cd4a56baa","first_seen":"2026-07-12T20:25:52.826879Z","last_seen":"2026-07-12T20:25:52.826879Z","times_seen":1,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":60,"connect":16,"send":0,"wait":32,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"off750.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10055060\u0026pdata=https%253A%252F%252Foff750.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783887920","fqdn":"off750.com","domain":"off750.com","tld":"com"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:22.666Z","timestamp":1783887922666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.za.off750.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 18:18:39 GMT","end":"Mon, 31 Aug 2026 18:18:38 GMT"},"fingerprint":{"sha1":"FE:7D:BD:89:AC:3D:FB:A5:D0:A6:9E:F7:87:D3:6E:EB:4C:D1:8F:43","sha256":"1A:A3:D5:8D:DC:DC:D6:64:03:15:A6:94:E3:B1:7B:46:40:C1:A3:EE:91:6F:72:E6:B4:90:71:EF:B3:97:B5:AF"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10055060\u0026pdata=https%253A%252F%252Foff750.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783887920 HTTP/1.1\r\nHost: off750.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://off750.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 20:25:22 GMT\r\ncontent-length: 0\r\nlocation: https://off750.com\r\nset-cookie: wssplashchk=af6908dd72c9c91bb3be1a0cb8a1809d22f179ac.1783891522.1; Path=/; Domain=off750.com; Max-Age=3600; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T20:25:15.751278Z","times_seen":17402670,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"off750.com/","fqdn":"off750.com","domain":"off750.com","tld":"com"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:22.691Z","timestamp":1783887922691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.za.off750.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 18:18:39 GMT","end":"Mon, 31 Aug 2026 18:18:38 GMT"},"fingerprint":{"sha1":"FE:7D:BD:89:AC:3D:FB:A5:D0:A6:9E:F7:87:D3:6E:EB:4C:D1:8F:43","sha256":"1A:A3:D5:8D:DC:DC:D6:64:03:15:A6:94:E3:B1:7B:46:40:C1:A3:EE:91:6F:72:E6:B4:90:71:EF:B3:97:B5:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: off750.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://off750.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=af6908dd72c9c91bb3be1a0cb8a1809d22f179ac.1783891522.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 12 Jul 2026 20:25:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 707\r\nlocation: https://www.rewd2026.shop/\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T20:25:15.751278Z","times_seen":17402670,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:22.717Z","timestamp":1783887922717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://off750.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 20:25:22 GMT\r\ncontent-length: 11935\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncf-edge-cache: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11935,"size_decoded":12180,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4842)","md5":"5e3f7dea84160d48d9439a2c1101ccd0","sha1":"761246bbd2d9c37f83de2fddfef84f2a4ee3fa86","sha256":"1db8743f5ff7fd6d5e830f0be90d6a947bd3563e4d9cc3cf15ff50385cbaa92f","sha512":"fba90690438456186773d31a5d39235f2dbbcbb9b8f0c4057dc8f82974cc09475c8ad122d056d5198bb1b576d26b01f8d229f84c202d8ad2ffca961d03c69697","ssdeep":"192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxzGjDkJe4sM0t50nAwsDfLYY3hwM:sXX+/DV7k/3FXsBt+nAXLYY3hP","tlshash":"2a32094dee9062b4f21703dd3bef299d1224a5c3640cc488f54d6de0af0e6cd4a56faa","first_seen":"2026-07-12T20:25:52.829561Z","last_seen":"2026-07-12T20:25:52.829561Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":3,"dns":83,"connect":20,"send":0,"wait":39,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/css/style.css","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rewd2026.shop/","date":"2026-07-12T20:25:24.113Z","timestamp":1783887924113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nCookie: wssplashchk=86e403363f72faab97db47f7df7086a614619a8c.1783891523.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:25:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 1884\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 20:25:23 GMT\r\nlast-modified: Tue, 03 Mar 2026 02:37:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9013,"size_decoded":2422,"mime_type":"text/css","magic":"ASCII text","md5":"13d9d4df669ca8e3f4a478fe5b3cbc8d","sha1":"b7431cc114c256d30c91ffb8fd97fd4b22878fb8","sha256":"b9087d044e9e856bc9184b44561f58146a5ba7fbb1be4a0880ae102dff6b061a","sha512":"57823a577c1552e98eab5ea44e424e66422364f961aba2a36bb420c2c4b4b32092194a2c3c78e6683980f6ae1e815898140a7e5ba536e13489eb1edbb9b3775b","ssdeep":"192:eI38ywrfjBqfyf3Q5tBJ9pEhxF0IoJA5U5ZgJCY75Q9Zgp+9pV/YpweRB:zYAMBDOcCeTw+","tlshash":"3a02fe482a631444b487896827b787c8625d9087de0fce6c7bd37694cf4e258b9f2bcd","first_seen":"2026-07-12T15:44:14.474375Z","last_seen":"2026-07-12T20:25:52.831238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/js/script.js","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rewd2026.shop/","date":"2026-07-12T20:25:24.329Z","timestamp":1783887924329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nCookie: wssplashchk=86e403363f72faab97db47f7df7086a614619a8c.1783891523.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:25:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1083\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 20:25:23 GMT\r\nlast-modified: Tue, 17 Mar 2026 09:01:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3640,"size_decoded":1635,"mime_type":"application/javascript","magic":"ASCII text","md5":"343e5145ccbfccd5d23b1012be6b5d9f","sha1":"2c11c47ea380b182df8063eb47839028f3278bb7","sha256":"59e559f30014169bf66c2dace7bbf5e3ea7747ad5cda6a5bbbb464c65198c4ca","sha512":"f55782f8500042832c65353943d5aae07b60cab2b1c4b89d076eab1f585f559d6ccbb853c637e2e8713d188bf38a55027bbff64ae9c2b7bf735022b17f67f7b9","ssdeep":"","tlshash":"6f713fca311720f09bb321b3174b72867876505f6dc2f455b6de8a8c1fa879482e56ce","first_seen":"2026-07-12T15:44:14.475837Z","last_seen":"2026-07-12T20:25:52.83257Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagpedia.net/data/flags/w20/us.png","fqdn":"flagpedia.net","domain":"flagpedia.net","tld":"net"},"ip":{"addr":"104.26.4.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rewd2026.shop/","date":"2026-07-12T20:25:24.340Z","timestamp":1783887924340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagpedia.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 02:25:01 GMT","end":"Fri, 25 Sep 2026 03:23:42 GMT"},"fingerprint":{"sha1":"CC:6B:63:0F:EF:D3:E1:79:A4:DE:06:D4:0F:F7:89:C4:B1:40:CD:FA","sha256":"CF:E3:F7:B7:D6:72:83:6E:0F:6A:E0:26:0D:F0:E7:5D:EE:5C:1A:1E:92:60:C7:16:30:94:F2:D6:30:63:AD:5B"}}},"request":{"raw":"GET /data/flags/w20/us.png HTTP/1.1\r\nHost: flagpedia.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:25:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-af\"\r\ncache-control: public, max-age=31557600\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 7024312\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=241FVm6om9Se8NVTYv85VQ1DAqeMSXpYIwNx4zAsYfUHqc5wEJSkWQuBIxk2b90PlVwVN9lhAL9nqSqn9Nj7oOCIJ8L%2BdLDA8nmyAngv86guDkFFPHoOPIviJKSe4YSM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2c6e77dc94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":980,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 4-bit colormap, non-interlaced","md5":"a5f97a0f56d94de1e38a2265dea61801","sha1":"a9abb61b8597864a78db0c1810b7a20b8492fc23","sha256":"585de11254ccfcc19026fc580881220bd893dae0d151a1c3868cc8a9e7f3c695","sha512":"c36c89cbd5113f669b3f9c1559e167974f2f3276cafe02f2dc4c6d76fff57f456898f268bfe29674986832acd3411953e574d6c02a8018e0995f500109dadd3d","ssdeep":"","tlshash":"75c0c0fb60024c2c4acc4d33c8039100f4e6cc0e061a171f5452523e050d1c180c52c3","first_seen":"2025-07-03T21:12:41.511423Z","last_seen":"2026-07-19T07:51:14.816946Z","times_seen":1417,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":39,"connect":14,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12883614\u0026pdata=https%253A%252F%252Fwww.rewd2026.shop\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783887922","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:24.020Z","timestamp":1783887924020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=12883614\u0026pdata=https%253A%252F%252Fwww.rewd2026.shop\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783887922 HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 20:25:23 GMT\r\ncontent-length: 0\r\nlocation: https://www.rewd2026.shop\r\nset-cookie: wssplashchk=86e403363f72faab97db47f7df7086a614619a8c.1783891523.1; Path=/; Domain=www.rewd2026.shop; Max-Age=3600; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T20:25:15.751278Z","times_seen":17402670,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:25:24.054Z","timestamp":1783887924054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.rewd2026.shop/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=86e403363f72faab97db47f7df7086a614619a8c.1783891523.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:25:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 2640\r\nlast-modified: Mon, 04 May 2026 06:13:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15173,"size_decoded":3100,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"57c26e33139b33d40a7df4e9578a5429","sha1":"0a4a8ce47f452497835dce9bde91b437df82fc95","sha256":"64703dae92e1a75d812bd408d5fc52158360c2dc52bdd7e18638e2743f2ad538","sha512":"bca25daeaaebf56a7b24334178149d7656c12467e941a7e1e869a9abcd6a44e7fc2eab51a52643dccdd2aaa35be6d5190fcf63c68fe4e908457cd7650dd9e6e9","ssdeep":"96:XVf1hBYalZbB0l4/l1R7Q3ttEsEjt86Sde5vf1nF28/J2vHwjC/2TYO8vAPTpiem:lV3cKA0j6bSPL4APNiL8g6X2x","tlshash":"4b62332762f8663f11530391e702b37a7ee5a193de4b502075be0ab86fd2d4ddd270a8","first_seen":"2026-07-12T15:44:14.472984Z","last_seen":"2026-07-12T20:25:52.83434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/images/costcologo.png","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rewd2026.shop/","date":"2026-07-12T20:25:24.332Z","timestamp":1783887924332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET /images/costcologo.png HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nCookie: wssplashchk=86e403363f72faab97db47f7df7086a614619a8c.1783891523.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:25:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 857913\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 20:25:23 GMT\r\nlast-modified: Tue, 24 Feb 2026 16:25:38 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":857913,"size_decoded":858409,"mime_type":"image/png","magic":"PNG image data, 1024 x 612, 8-bit/color RGBA, non-interlaced","md5":"33159d30c4c026d7c18e9d8b1c6568ac","sha1":"277a7b2e70e59469efc162acda2c8f5c3e27c7e3","sha256":"7c8feb7459211753a58f20d791ee7ad877dd9b55899045ed4c4c658294c51981","sha512":"a553641562b5bf13ec4be5d0984d6365743ab2910ae299d5b75d8d68c74e2bee3aa5bc83d265695571e8fcb3452bd420ca89c0e9c9814e092e01a0c07744cd28","ssdeep":"12288:j4SN0TKlkujfuQUy5QkqpvwTkMB4rWrTtDOuTaR5dhr07AN2xa61HGfj8DvG7VOr:cSwFgfuF2IMiWFOhAaKaMHCpRI","tlshash":"98052361652edd4bc5dbf03d02663929a9b861d26305c084c4a7cbbf90ffea99c2d613","first_seen":"2026-07-12T15:44:14.477143Z","last_seen":"2026-07-12T20:25:52.83579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagpedia.net/data/flags/w20/ca.png","fqdn":"flagpedia.net","domain":"flagpedia.net","tld":"net"},"ip":{"addr":"104.26.4.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rewd2026.shop/","date":"2026-07-12T20:25:24.344Z","timestamp":1783887924344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagpedia.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 02:25:01 GMT","end":"Fri, 25 Sep 2026 03:23:42 GMT"},"fingerprint":{"sha1":"CC:6B:63:0F:EF:D3:E1:79:A4:DE:06:D4:0F:F7:89:C4:B1:40:CD:FA","sha256":"CF:E3:F7:B7:D6:72:83:6E:0F:6A:E0:26:0D:F0:E7:5D:EE:5C:1A:1E:92:60:C7:16:30:94:F2:D6:30:63:AD:5B"}}},"request":{"raw":"GET /data/flags/w20/ca.png HTTP/1.1\r\nHost: flagpedia.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:25:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-ab\"\r\ncache-control: public, max-age=31557600\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 5757445\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYds6CQPlpU1AhjzoXJIegXenHeesTFYUfW3mSqfaFMpTU1%2BOGNnSJlkduyz5ERC9CzGehb9vbw%2FY3zQw5qA6pYD1XVBhCs4WsbLaLr0mI2XP2460elljnxdX0WpQVTi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2c6e77dc84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 171\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171,"size_decoded":978,"mime_type":"image/png","magic":"PNG image data, 20 x 10, 4-bit colormap, non-interlaced","md5":"9efe227b924ceaab410705d339a8e6ee","sha1":"791dd03bf0023332cce2872a402a861f53a81eb5","sha256":"85b62b38ed06cf80a57b6017f821ae022245169ec49bbbc5e00c40610f6f7887","sha512":"620e8a646b92b17b41cd135f04b5d5d82bd6d6f033ff21f2ebf7ba3ecc802e76a7531ede2fd04809c2820bbfd7d398a28d12cfefd47d12526192047de74cdf39","ssdeep":"","tlshash":"aac080f3994def75e519151fd4144110d465831ca756138b1081433f5c5d7c094451d7","first_seen":"2024-08-20T15:21:48.718816Z","last_seen":"2026-07-18T08:36:40.230174Z","times_seen":578,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rewd2026.shop/favicon.ico","fqdn":"www.rewd2026.shop","domain":"rewd2026.shop","tld":"shop"},"ip":{"addr":"194.145.208.24","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rewd2026.shop/","date":"2026-07-12T20:25:24.504Z","timestamp":1783887924504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rewd2026.shop","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 18:18:12 GMT","end":"Fri, 25 Sep 2026 18:18:11 GMT"},"fingerprint":{"sha1":"26:02:0E:8F:D5:70:0C:6D:E9:D9:FC:31:B7:3F:93:DC:92:0A:EA:D1","sha256":"95:1F:AF:6B:6A:39:32:2C:9A:43:12:1B:EC:98:3C:B1:5E:51:26:CB:D4:3F:C2:D3:52:4C:4A:3C:1A:41:5E:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.rewd2026.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rewd2026.shop/\r\nCookie: wssplashchk=86e403363f72faab97db47f7df7086a614619a8c.1783891523.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 20:25:24 GMT\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1238,"size_decoded":1675,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-20T17:25:46.424215Z","times_seen":41213,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}