{"report_id":"b43606af-c4e2-4d35-8a0c-070d66a49a65","version":6,"status":"done","tags":[],"date":"2026-05-21T19:59:51Z","url":{"schema":"https","addr":"padrerewards.com","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"padrerewards.com/","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"title":"Padre.gg Cashback","dom":{"size":5258,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"48d26a218e5b12fdf547a5f2cbd75503","sha1":"704931027567b2c5558e8585b1b2b0502f8ddc39","sha256":"1a7fb7a3d4e2b11ba609a0f46390a8a40ee2ae63a4e3c1551dee9359aed67366","sha512":"0fd0a40d2ac73d99d824de06e32952d52215738f2155c20bb0c6d205e4f9e0fee0600d7ccc3758faf589e88818bde381f784906e7ed3e0ffd28b748cddf86da1","ssdeep":"96:nGN/3mF/2fkc3BPAkqJDKaoIj2EXPGvFmx9K1ejSc:GN/3mF/2fkc3BPAk8aEqmzl","tlshash":"1ab10e12c0f47977521281a5a6dab72a9efcc447c1a106a573bd0b9c4fc2ed7c8b711e","dom_hash":"domhash256f12ac0e00ec77558fd360267e6b21","first_seen":"2026-05-21T19:59:56.662417Z","last_seen":"2026-05-21T19:59:56.662417Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"padrerewards.com","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-25T19:59:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"padrerewards.com","ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-05-21T19:59:52.436758Z","last_seen":"2026-05-21T19:59:52.436758Z","alert_count":20,"request_count":10,"received_data":1196034,"sent_data":4723,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"padrerewards.com/","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d481ff7c1be53460b753520e4cc35bea","sha1":"2eb0a20957976297dd2adf29969d07510882332c","sha256":"84d912c20af66559bc7bb05848449c8304f59b199cf7e4e455ea26bfba4e6ea5","sha512":"22626087794e6f22b88b3ac4e3e6a2a2c6f0675a62b9be96eb99a4f596ba4e74bb0e56c7c506f20154d452dab0c8a7e091b0598fc58ff3543b45bdd17d9398a5","ssdeep":"","tlshash":"c5c08060c768cd70063a10bb62b4568574511c7e164370dbc6fd8bcb599cfc15a58914","size":186,"data":"","first_seen":"2026-05-21T19:59:56.72866Z","last_seen":"2026-05-21T19:59:56.72866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"152560c32d60875b2f0d0fd4eec9615c","sha1":"2702c9b285bb7381c2a32905db936ccb792ce9fe","sha256":"4fc0e889d08676a822fdbe4c0a26a95301278c9cca2f2e95d3949d80a28177c7","sha512":"6787d42b7779d317dc4b0fee7eee00acffb4459650f7d028ba289fa5caa91e665b7d0e46008d9671f92ddbcff848fbb867759674d7734ca35b0733c04e63ca22","ssdeep":"","tlshash":"3d9004051413d07141f401414707f33cd51100344550fc5554ccd37c7c117075c4cdc3","size":47,"data":"","first_seen":"2026-01-25T12:31:31.368166Z","last_seen":"2026-05-30T10:38:46.372436Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/secureproxy?s=%2Fipfs%2F_cKmsAvASMq51zY9KQeJkQ1e642d482d1687f41abcaea622c4f5ff%3Ft%3D1779393570458","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b491f4498bc1973265b064b72aeb7fc","sha1":"906caecea069206d8fad466c0ef4a06122187e29","sha256":"c4a9c27cb027577ceefe32eba9f7601966dd282519f51e31cd54347fa637c7d8","sha512":"2c6f9d379abb7d197fdb61c657669f6e0efd1c2601432dbe84480268474a2bebd79c9b8147bd3eeeaf798faecc9397cc29f053e1340c41e75a9e578db9dc834c","ssdeep":"6144:ChLlLhUI8CMx7wWnGcgR73lim39tj7OOGVzEr7/ViJIs5kJBjSM10dbPcw3S3udT:GUjCMx7ITvtvFHdiJIikcbPfSvK","tlshash":"80c4cbc0972c1ef764872eab05e3c76fef8c4d4889cb185972c098b9528570e2df569e","size":580032,"data":"","first_seen":"2026-05-21T19:59:56.67346Z","last_seen":"2026-05-21T19:59:56.67346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"padrerewards.com/","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-21T19:59:30.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7p9zW8iOIF6bnMRX6TeS412OaLXW2nd4pMKX19ocGm2YBI6tF2VjO0XDULtqNV8Uv80fUx%2BPRIS8EotuzsK%2B59oZQmqIqCN4fMpOQdYtORyBOBa%2FLONDfkzTaI58QcA%2B7y4\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ff629750eaa56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"ea66071fd602f3f91e7aff09b8790676","sha1":"3afbc8715c0a6dca119c5c71188bd5ff4e08eb8e","sha256":"9be423bcc60189b97504972388ba1972bfcb6e707147b701b9bfa73aa3d4f46f","sha512":"8a044b9a4446391e9b8982a7efbc1fd9c0f2dc4f4334ee45abe81cd62f441c2b7b2982d1996cbacdef49795fdec7ae0dfe6e1a9d629ed1e723472175b58ecdb7","ssdeep":"96:ENh3mF/2fkc3BPAkXKaoIj2EXPGvFmx9K1ejSc:ENh3mF/2fkc3BPAkeEqmzJ","tlshash":"0ea10d12c0f579b7121281a5a6cab72a9efcc447c1a106a573bd4b9c4fc2ed3c8b711e","first_seen":"2026-05-21T19:59:56.666547Z","last_seen":"2026-05-21T19:59:56.666547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":59,"dns":44,"connect":1,"send":0,"wait":217,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/style.css","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\netag: W/\"6a057bb9-18b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ca87TRNWxt3jD0HFdkRxTeGksajSYYVwgb3ZwsSbYnhNizKFavhajn%2F3f3GLd13Lsyvz1T3WEWAVXcItFi1Sooxg0hJy2D0AE9azUMzKJGl2jwzYX9J%2BXu8sNThKTK1nRwo4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ff629777af4b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6323,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0824434357e72c7f35ea15a999e13d00","sha1":"634a8be3f12de1b4aed944d47755c750d2551335","sha256":"9ba64e76081ed31dcce8e2c5cea0e4e45849ac271092da8919b6f78e469c69f0","sha512":"0b1363a24dc092aa94f0ff3a6b23e33a945c53007ff41769a8bf98b077257fb766e53a4cf12c51cf1eb378c3e810552fb7babf749ff4b31800f4e007e21cb427","ssdeep":"96:yoS8Jz4WEDXitCPCnwrChs1ARNYCTawQX8vECcCF97vO7j3rHy4Cz6Cdv8ww8bFV:yoLgXx67+ENvY8TzP4JIhXVc0Eov6qqo","tlshash":"a2d165d627a15768b93bd8a9a982df4a734cd013810ed9b86ff4505cbecd1da12b1b0c","first_seen":"2026-05-21T19:59:56.669913Z","last_seen":"2026-05-21T19:59:56.669913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/secureproxy?s=%2Fipfs%2F_cKmsAvASMq51zY9KQeJkQ1e642d482d1687f41abcaea622c4f5ff%3Ft%3D1779393570458","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F_cKmsAvASMq51zY9KQeJkQ1e642d482d1687f41abcaea622c4f5ff%3Ft%3D1779393570458 HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"8d9c0-kGyuzqBpIG2PrUZsDvSgYSIYfik\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=2d8Fnd4vTNnRROcr5_DPJw.js\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/21/2026 19:59:31\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: c2aa96b0f0a6a613081c1ace64be5215\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jT1hfh0Y6zKiFvKA9c6Xt1rru%2F6jT7QAtm9he9WiXIuzlBGzw97BsmSFv%2F3LZZO9AyRLfgkPd%2FMIltHOrCE6fY7fvgEo4u63px1n9Pl2oDGITl6MxPOTFCr80cM7BtWFJxKk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff629778af9b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":580032,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4b491f4498bc1973265b064b72aeb7fc","sha1":"906caecea069206d8fad466c0ef4a06122187e29","sha256":"c4a9c27cb027577ceefe32eba9f7601966dd282519f51e31cd54347fa637c7d8","sha512":"2c6f9d379abb7d197fdb61c657669f6e0efd1c2601432dbe84480268474a2bebd79c9b8147bd3eeeaf798faecc9397cc29f053e1340c41e75a9e578db9dc834c","ssdeep":"6144:ChLlLhUI8CMx7wWnGcgR73lim39tj7OOGVzEr7/ViJIs5kJBjSM10dbPcw3S3udT:GUjCMx7ITvtvFHdiJIikcbPfSvK","tlshash":"80c4cbc0972c1ef764872eab05e3c76fef8c4d4889cb185972c098b9528570e2df569e","first_seen":"2026-05-21T19:59:56.67346Z","last_seen":"2026-05-21T19:59:56.67346Z","times_seen":1,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/images/padre-mobile.webp","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /images/padre-mobile.webp HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\netag: W/\"6a057bb9-1dbda\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ACVxsEIpnfPDL3eTqi9sYZteFQdikJqtEB5I11sb%2FadFxiCF1Dh0VCkLv1q4WS5bPdAV3C%2FGsJCvSCXKQ5tr9sPkfnMpWdA78j5ZF3kO1wNzezuljl9P%2FwI6fQeXrXuPGQ2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ff629777af8b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"029db6cb04759ec36a9decac84538eaf","sha1":"1e9b58fd37f6f3c53329c9ddccf699126a0d636b","sha256":"8d66d5162f21b1623ebb3ca2387ecc832db4e1681d9004f1d9c238477d36c5f1","sha512":"6b0a614fe7fde529f9a98db322ef0c4856c3af546af048c949c0765453f773a7a9a98d693dd3c759716bc72c5cbc1d1ee05afa92e037ee87ca4d6bbddbc89107","ssdeep":"3072:ooa/+JUxhyOCFU/bobZ659KUbv5ikoRd9qS8EGR:5ZPW0s9b0BR3qSsR","tlshash":"c3c3122461c31512b2d97b1fe4aa24930f179770d0b3afe399b19fee7a045cc6b85392","first_seen":"2025-10-21T03:42:14.246298Z","last_seen":"2026-05-21T19:59:56.676799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/secureproxy?s=%2Fjmpd%2F","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:32.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padrerewards.com/\r\ncontent-type: application/json\r\nContent-Length: 1391\r\nOrigin: https://padrerewards.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1391,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBBAOwAh0ACQC5AvkCFwDcAiMAAAIBGwMAAO8nhn2XtsKCAQHXskIHhGsr0jN0YGcCAADrDMR1CzTZf2jTw208oB-EtfKYM0UMBXujoNnz0Hdf7pUEvJdd2Nmk00Kxxby7y98pPzfgHHJlTwgw0TQuEbV4x5PZ6NdaGFbh48geK18jHsLTRsjSNyk64STsB-Lm2D1dro6miPhgMEQXc8y8lAdjq7aDh-Wg0XJxLRwUmBTiLz5Ceklz5PynR7M8z2c3pAtwGD8nXqrsImcwKajehR7ctrFSjQl50Ok9beadeBSAULP2bAkCaph1pvh3ASxf0hKKS51aYdtpat3UgkU2iPFiDoeCE9XNEp4yreReXO10K_80MvKC9RQID1IPRqH24MlFG9ntEO0WEttCJ_XKVoNAU1bAfBNtX5p37KnPDG9iCyvmTuH_aNeX8wUuj4hSDBjCPvakJSnrsytqVZA8n9lwalYAoKG3KSEOwjFQWznt9doyz1MgPeoPvunkEOjqAW7Cjx6UcYka_Dl2mwYsTekNh4vMC4G9VcKGO7Kc6H1V8vxlZO_H4EWfGJ6BUW8l-EnZTxUhMrFk5dyCcty-aw2znHtmDxIi9b30jahVzzQeZAWoI6C-zfVth2eSBp75wnmQrX8dMXKLHf56lpYxo_7i-5rsNnjzxt3ox8jF15K232ziXIbKm8Qbec78xSVRxsvYeMhVLUQBlGO7ZFl7r5OdK_NkxljnK6D9a4zTmwBx5VukPE_powbgokLD0W7sUO5TK6lWyE8pYyAz-3b__UeUK5-Pj4hsvGlcs1cE3FmHDrSirVCjrwkvqz2K1aNdPIoX5sFPG55ef0GZCzxY2BjjFrOxojWN8zzBoP7kZ1FNF0xOchVz70pP0eTWjp65cD1isQb8ySNeyMsuFk_WM5i9icLhK740wSImFjMKDHiG0uQf2grJ-lBx6NJJASNc-raFT4so7XUXEFJHzP7t3sJ9mXLxswj4YSG0cNefTQZF6YFoi8lnT0xR-Uv8eogM3iUZLW-VUPaITNI2W9O_9fhh4B2h0v--QjM5jCjX74n8-lVmE9MUY7ca8SZPrZWpzIDQivxyZyC1cMoqS0tvKJxIjy4MgQtAxMUaSVMtQrBzwoeGLTthfqv2NrMXj7qtbLlT2xA\",\"challenge\":\"eyJpZCI6IklZdU9yUnAxT283N25WanlEUllPTEEiLCJub25jZSI6NzY4LCJoYXNoIjoiMDBkYjJmNmE5MDRkNGQ4MGIzOTYwNzcyZmM3YzFmMTNhNDRmOGNiNjY4MmYzMWVjZGRjZGRhNzU0M2I4YWUzYiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:33 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1779393632604\r\ncdn-proxyver: 1.53\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 05/21/2026 19:59:33\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 046808eb3de53328f7e2b9899fd7ccc0\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ygSjkWjjdmSKthsu3RLYP0lO05F8fzXVy4nIWAthtTplvw2C%2FvA6SYiSVA6JoB5hXIxHOFHVgctJBLxYfgbw%2B6tr%2BhoPo4e2cQGq420LCkjhO0mNzET%2FtFYx8l4Y2IqYYhM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ff629839c12b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T09:57:30.082626Z","times_seen":17834258,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/images/padre-icon.svg","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /images/padre-icon.svg HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6a057bb9-4f4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUWpcipI2foYtlzGnTablEdaPaEZqorvdSKeQ%2BXlcPmBgIibQ55VcPCsMp5rFn9v%2BM%2Ft5Yjbmo8QjJ4Bs%2FQp8xAZhaunFb25gYFHZlN5MpBLQ7s%2Fuzh4lNE4nSikncftoZcJ\"}]}\r\ncf-ray: 9ff629777af5b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e376e77c201ee3ce7abf57402980db8","sha1":"f01a505d5b54508ca5b15cecfa861cbd178ca73e","sha256":"b6179ecbb597ef391835b9847236907d869689d2a65ca8027bc103e811f73da0","sha512":"ccfd23e389978afbbeaf888986abd1c583a3bcc00d15e199f7c45ae414a8c0edb4556d35cffe6b25d88165391fc09d361918ba67e6261e7e3f065e66f780eca0","ssdeep":"","tlshash":"ee21d02af31ed852d15883ecd96158387d6740db98c4a251d8edef0b742e4d20c3a2e6","first_seen":"2025-10-21T03:42:14.241857Z","last_seen":"2026-05-21T19:59:56.694662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/images/padre-top-performance.png","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /images/padre-top-performance.png HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 305652\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\netag: \"6a057bb9-4a9f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kczJSg5fIylGZc6v7actowE4huJLiqKkB7WI4Xd0K9YtiU4FMv8OZRSdkyDFZoJTSInPgYT41FCTlsu0isfj0YtrqW3ZzI3ozWHBk5tyYHkv9YqLXZwATrZ9JSlFmfIczICI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff629777af6b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 890, 8-bit/color RGBA, non-interlaced","md5":"9c964ed16a0c6322e22774db552e163d","sha1":"638c417c0b528bfa59f3d74e11e167dcb190fddd","sha256":"8c62ca5e2d007bdf04f0e9dd358cdf00771e01d2ef20f7d37e7c70905f24e2a6","sha512":"987e35c3711f10174954767b66fd0dda51884e9bb3bcc401de51e0a58d32f7b2712b608eb5730bb814bc985dd81f1b2d0ce1523447732aef4441ff2b87e316dc","ssdeep":"6144:HbtddY4L0q44rN5nqAjouE7iQRVP+LvIRSIGj/mL3S3aIJ27s7uFOg1AnEwxvqA:7tnLv44rN5nfEOQRVP+D+SILLC3aK1iw","tlshash":"1d54028df4f191accdef46b7a72a1ba0bb7515331c54064d50b634e20ca9e3d6b60a8f","first_seen":"2025-10-21T03:42:14.183274Z","last_seen":"2026-05-21T19:59:56.700781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/images/padre-multichain.png","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /images/padre-multichain.png HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 116029\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\netag: \"6a057bb9-1c53d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0ljmrm2QzwjmDMtuaMSFed2LVy0j%2FKWjH%2B9s4f5nbq54oUcTAZvZUE8H%2F8FROj8%2B398m0Aikcva9tScodLCInyXLGLA6vIMfA7WzLL7UiSD0MeW5YsWz7OiFqdnbSxHXoEe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff629777af7b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 950 x 442, 8-bit/color RGBA, non-interlaced","md5":"4a8abcff19fac66347f01350d187a7b9","sha1":"13df6a1d2447757cb6d12a75d695aa8d3b8d86c1","sha256":"eefcbcf4283e85698486905da1ea1d36146670b2d5a8e85b1d4e3e70e173ff3f","sha512":"2bfc2eb19816c8e30e11e3b330385cf946ac86155be422f565adbeb77d5b69eac87f12d15b6ebbf6724ace04be0da9369f62391698ff2a1c600d37ec7c8de823","ssdeep":"3072:E9WXKIsTi0AZFABI/cGNNbxpPIlcNlTPQFKZ9dqT+iZbWhJT:E9NOvZmBIRNBrJNlwK/QamyJT","tlshash":"65b3126664d4bbae656604ff50f2341b6b26c4c3a0f797def15423a5fe338a06234e80","first_seen":"2025-10-21T03:42:14.189618Z","last_seen":"2026-05-21T19:59:56.711606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/fonts/font_f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:30.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /fonts/font_f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2 HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\netag: \"6a057bb9-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bio0GVPAseQ%2FneI85hVBC6EwgIzxhPUo0deMVrCDY0d8X3cRBzw9pxZPpdcOP8407sqnASKJD7iL%2BcmfLbIyOPG93gsXJQ%2FNd9hYs%2F03x1oNs9PzaYEB3MUhms5v0mj5p31o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff629793b68b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T10:00:17.399566Z","times_seen":26284,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padrerewards.com/images/padre-icon.svg","fqdn":"padrerewards.com","domain":"padrerewards.com","tld":"com"},"ip":{"addr":"104.21.34.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padrerewards.com/","date":"2026-05-21T19:59:31.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padrerewards.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 06:21:25 GMT","end":"Thu, 06 Aug 2026 06:21:24 GMT"},"fingerprint":{"sha1":"1E:C9:4C:A7:41:EB:6B:70:A4:A7:E0:9B:E3:D7:9B:84:41:9A:2C:FE","sha256":"F0:1B:B2:3C:0C:CD:CC:88:F5:1D:1A:57:D9:EE:23:85:39:19:BA:1C:BF:4A:2D:79:FC:58:F9:6F:D0:07:E8:6F"}}},"request":{"raw":"GET /images/padre-icon.svg HTTP/1.1\r\nHost: padrerewards.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padrerewards.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 May 2026 19:59:31 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 14 May 2026 07:37:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6a057bb9-4f4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZyFmZ4%2F6vAOWFn5oeiZb%2BHGxeXtc5W9t%2B%2B4Z7TqtdulPMB2miYQ2jjcOrI86GHgLnX%2Fot3YnYjPFT%2BytzwmbFW6Y7Zma%2BDuvMwZPdIESp6DO4y7dY7Kujq7QwzoEOwq1SS%2B\"}]}\r\ncf-ray: 9ff6297babdeb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e376e77c201ee3ce7abf57402980db8","sha1":"f01a505d5b54508ca5b15cecfa861cbd178ca73e","sha256":"b6179ecbb597ef391835b9847236907d869689d2a65ca8027bc103e811f73da0","sha512":"ccfd23e389978afbbeaf888986abd1c583a3bcc00d15e199f7c45ae414a8c0edb4556d35cffe6b25d88165391fc09d361918ba67e6261e7e3f065e66f780eca0","ssdeep":"","tlshash":"ee21d02af31ed852d15883ecd96158387d6740db98c4a251d8edef0b742e4d20c3a2e6","first_seen":"2025-10-21T03:42:14.241857Z","last_seen":"2026-05-21T19:59:56.694662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-21","alert":"Sinkholed","trigger":"padrerewards.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}