{"report_id":"ebf5910f-1e17-491a-99ab-9d3bc97727ce","version":6,"status":"done","tags":[],"date":"2025-10-11T15:03:40Z","url":{"schema":"https","addr":"wllt-reward.pages.dev/","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wllt-reward.pages.dev/","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"title":"Get Your Rewards!"},"submit":{"url":{"schema":"https","addr":"wllt-reward.pages.dev/","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T15:03:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":45512,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-11T15:03:19.256269+0000\",\"flow_id\":932888131914785,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":45512,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"bfskuzvjjkminpgrdbul.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-11T15:03:19.248865+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":45520,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-11T15:03:19.259705+0000\",\"flow_id\":997353443544294,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":45520,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"bfskuzvjjkminpgrdbul.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":934,\"bytes_toclient\":1654,\"start\":\"2025-10-11T15:03:19.249062+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.4","port":42394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)","source":"{\"timestamp\":\"2025-10-11T15:03:19.261938+0000\",\"flow_id\":1043399787930729,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":42394,\"dest_ip\":\"159.89.102.253\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2854306,\"rev\":2,\"signature\":\"ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_05_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_05_03\"]}},\"tls\":{\"sni\":\"geolocation-db.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"27eabd2e03c903c0e38682b67d24b578\",\"string\":\"771,49199,65281-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3374,\"start\":\"2025-10-11T15:03:19.189545+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.4","port":42394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI","source":"{\"timestamp\":\"2025-10-11T15:03:19.261938+0000\",\"flow_id\":1043399787930729,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":42394,\"dest_ip\":\"159.89.102.253\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2048378,\"rev\":1,\"signature\":\"ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_10_02\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_10_02\"]}},\"tls\":{\"sni\":\"geolocation-db.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"27eabd2e03c903c0e38682b67d24b578\",\"string\":\"771,49199,65281-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3374,\"start\":\"2025-10-11T15:03:19.189545+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-05T22:15:40.094389Z","alert_count":0,"request_count":1,"received_data":64222,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geolocation-db.com","ip":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2019-10-23","domain_rank":55872,"first_seen":"2019-10-31T01:19:14Z","last_seen":"2025-10-06T17:48:28.440318Z","alert_count":0,"request_count":1,"received_data":358,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.14.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bfskuzvjjkminpgrdbul.supabase.co","ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2025-10-09T11:39:02.972633Z","last_seen":"2025-10-09T11:39:02.972633Z","alert_count":0,"request_count":4,"received_data":5051,"sent_data":2768,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":2,"received_data":98734,"sent_data":1122,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wllt-reward.pages.dev","ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-11T15:03:40.528179Z","last_seen":"2025-10-11T15:03:40.528179Z","alert_count":0,"request_count":11,"received_data":129202,"sent_data":4962,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":45512,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-11T15:03:19.256269+0000\",\"flow_id\":932888131914785,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":45512,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"bfskuzvjjkminpgrdbul.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-11T15:03:19.248865+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":45520,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-10-11T15:03:19.259705+0000\",\"flow_id\":997353443544294,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":45520,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"bfskuzvjjkminpgrdbul.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":934,\"bytes_toclient\":1654,\"start\":\"2025-10-11T15:03:19.249062+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.4","port":42394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)","source":"{\"timestamp\":\"2025-10-11T15:03:19.261938+0000\",\"flow_id\":1043399787930729,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":42394,\"dest_ip\":\"159.89.102.253\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2854306,\"rev\":2,\"signature\":\"ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_05_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_05_03\"]}},\"tls\":{\"sni\":\"geolocation-db.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"27eabd2e03c903c0e38682b67d24b578\",\"string\":\"771,49199,65281-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3374,\"start\":\"2025-10-11T15:03:19.189545+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T15:03:19Z","timestamp":1760194999,"ip_dst":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.4","port":42394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI","source":"{\"timestamp\":\"2025-10-11T15:03:19.261938+0000\",\"flow_id\":1043399787930729,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":42394,\"dest_ip\":\"159.89.102.253\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2048378,\"rev\":1,\"signature\":\"ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_10_02\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_10_02\"]}},\"tls\":{\"sni\":\"geolocation-db.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"27eabd2e03c903c0e38682b67d24b578\",\"string\":\"771,49199,65281-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3374,\"start\":\"2025-10-11T15:03:19.189545+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/fingerprinting.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2728031c63e5f2aa4bb9e541cb16b27","sha1":"6fbb531c1fcc68afad777ce12ba132dc2da76641","sha256":"27412c435198423b93d7faa5837fd5a3e4ed3f06374065808d38a3a0448a7ff3","sha512":"bdeb3798996d37de6e43cb3d56af6e70b1d2ca0f07c8c3f3dfcb65294572a5ca5a6085605fa6e3e3a4d259e454f168801ddef20ec750f3dd9a5664fc4d823afe","ssdeep":"192:lPfGQGSXjAGPm/tTHwyj47wD4hrGIekUR/lmQhrPVZSy/1UyGIW/TRXiQinJAvQR:lPO+6ygRlhZGNUX","tlshash":"c742b70d21b71816105f337aa74f61007632a11b3ce8fdb8794e97042f86a3a94b6fdd","size":12339,"data":"","first_seen":"2025-10-09T11:39:06.433044Z","last_seen":"2025-10-19T15:27:18.703072Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/config.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67eae2e51baab9244663210c48045561","sha1":"dc7af04e994cdb5ca2e6259d883d0c7370e16f0d","sha256":"694e93d3056f29179e38b23090a79d03ee6e8ae2a44541e124d14703a5ad0130","sha512":"d5fb8bf0ffcd2387d6659ebd2b27ac431470bf0e920ebd891a290a1755e6ea6ee2cec62ce4f4e114b38e08ea0fc9b434271ac1c6c30b4fe914252713f856de2a","ssdeep":"","tlshash":"d601c99b94ea851342023ee2d49f2e6f0a2563b43c8693a4809e217c315bac2a75b01f","size":801,"data":"","first_seen":"2025-10-09T11:39:06.419985Z","last_seen":"2025-10-19T15:27:18.682924Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/api-helper.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5502f8af7dbed416c971965cfab266a","sha1":"2c8d6cfcf223ae656a35c8b8871b58aa5805b643","sha256":"b4173dc39a3da212de84f631076f4af4428422c281213bb29874f1190b802c2e","sha512":"7d887e494a9de254f198d655c172ff33428aad3ed33c8766025e2295fc525c7f55b8e027e24ecf201b1ad5d77abee17d484f6b758f9e14fe5d143f7353402799","ssdeep":"","tlshash":"94410ddcb2832117865ac198636f5104652f897ba8c02213b1ed439d2f5a01e5ff9d9e","size":1905,"data":"","first_seen":"2025-10-09T11:39:06.430617Z","last_seen":"2025-10-19T15:27:18.531453Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/encryption.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88907ea956b02407a46096572a032168","sha1":"bc6bd131fac97eca6aaedf849a4444b75c448c6e","sha256":"cce6834490df30d20030ed74851dc7fe1d28bbca8274789fb67c86f52b0f264d","sha512":"c8d37ffb474079b229a1f38dffb5919c97f3cf6de8f01ed3fdf04187b2af719c49239e4b914a4968173adc87eaa4b46ad12ac607f1e36dc2743525133354d3e5","ssdeep":"96:UwvVsGv6C0oRaj9BarNxiuGA3ywxdAPgMyai3vap9e:UisSDaBarNYOEPDyasap9e","tlshash":"dfb152593cf6362246a3a0f20b37e1116237f61b3715ce91fa4d47843f096689b62fd5","size":5368,"data":"","first_seen":"2025-10-09T11:39:06.402749Z","last_seen":"2025-10-19T15:27:18.468535Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/bot-check.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fd023e7efcf7b018c4bb6f7816b719e","sha1":"d177d74ae83aa1ee5bd381d7ce5dc887f65e02a5","sha256":"b7f950292ed8958100985c73cb949b41b362cdfe89eaa594baa6df1a6a3f69e1","sha512":"a6e24a5457168dc89c28afe7e97472dddfa5ff195abe5a4649e65aec4fded6721a75ad32e89278196c3cae3f99c973d048b1c03188602cf9d0e4e007f88310cc","ssdeep":"","tlshash":"1051a61438f27333261380b4c7afb10673269a67235edca9b62d53084f41e55ba33ad6","size":3156,"data":"","first_seen":"2025-10-09T11:39:06.422664Z","last_seen":"2025-10-19T15:27:18.47827Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/referral.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0cdcaf38efe3137bbbc27a64f4652b","sha1":"ea4012279a67224de1e0f875bc98a7572d174620","sha256":"c81432f3ee981fbba1c7d47072e6767cf7141340ae10ac0d27ffc944f05f6daa","sha512":"8a85e24b0f0e1a41ad3c1c3d5ae2a3b0170e282f95264bde461f9459f4b3a999a70256f9fc05760638046805e6d93feeeef18305187b8d2668caf745fa66a9b1","ssdeep":"","tlshash":"7e510058a4f718314557a03a227f922923bd404f76b5d829b90d8b5c1f8df28cb72bcd","size":2883,"data":"","first_seen":"2025-10-09T11:39:06.409136Z","last_seen":"2025-10-19T15:27:18.491075Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-08-04T09:34:08.992065Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/main.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8c478d5e14a5119907266055763839a","sha1":"fc82d4474b79e0a25c8d4fde444a06c9d3d9456c","sha256":"49fb3fce1a028e6e6cb79566e549139e95a35f1c9a17a5db4725d96c9ce779bf","sha512":"6b8461abb402ae06602c2f3b92601226a8a6a60538061f66049257ae7224fecf89d749677f49f26bc99400e511f4e80aeaa36e3994ffb9705d843d72e53b7259","ssdeep":"384:LKz/4F6HMgmYws4N5O12Bs1ggLqRQ8eygRYgiDxUvgBZKnQCg:LKz/4F6fmYrsLTgLSQ8SJiFHBZcg","tlshash":"a2f2a71972f705350673d0bbab6ba1023332410b7685de583abd43540fc6f25aaa7bf6","size":35756,"data":"","first_seen":"2025-10-09T11:39:06.435582Z","last_seen":"2025-10-19T15:27:18.632396Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wllt-reward.pages.dev/","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T15:03:18.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBXo3R%2FXPqrAMVhAVcMlKFhlbZpBP59Wp7HPeF6xpzmjpd25X4W0fYLogKKycBgWUJHiqt588ZlIvUDNmsiz5Pv1bXh5SQFSg6A8I7lCm2PTi%2BbZCw%3D%3D\"}]}\r\netag: W/\"73eb3c6fcfc5932b7b11ba94a56b55ab\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e552b5235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":2520,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (442)","md5":"a67a9e380eac653f5cbb34edf8ccc646","sha1":"cc4823ad27d5dfed5f6aee3dca12ea5d59883833","sha256":"cdf8f6490ddb396d941f5bfece9fcf9c1c8b7dee92717e5c25ac1decc22c6b7c","sha512":"d419f168d7e1e661052de6fb75042ff649e8d1f3ddf5cb466ab49d71bc09b59cbc18ac4479edcde3e41413409cf75e35e5fd814a23dc09888c392a8694f9830a","ssdeep":"","tlshash":"bc51981edee8c1bb0041968526b1f62e3d92854ba740d96839fd04656f96ecdcc23d64","first_seen":"2025-10-09T11:39:06.439969Z","last_seen":"2025-10-19T15:27:18.511238Z","times_seen":9,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":21,"dns":6,"connect":1,"send":0,"wait":66,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\nage: 228909\r\nx-served-by: cache-fra-eddf8230023-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23305\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-08-04T09:34:08.992065Z","times_seen":459,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":35,"dns":5,"connect":15,"send":0,"wait":16,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/api-helper.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/api-helper.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAGNm4C7U4opy%2B80l8xZWYNOsJ2yo0To3vxDNy23280LXAMggjosW152eMdnBzLrnZG6Uu4%2Bz1CyIOJvWysYXdNU4tGS0G9YsJ%2Bgw8GqKcPOjMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2eb6e058538833460bad1da1c4abb13d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9da56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b5502f8af7dbed416c971965cfab266a","sha1":"2c8d6cfcf223ae656a35c8b8871b58aa5805b643","sha256":"b4173dc39a3da212de84f631076f4af4428422c281213bb29874f1190b802c2e","sha512":"7d887e494a9de254f198d655c172ff33428aad3ed33c8766025e2295fc525c7f55b8e027e24ecf201b1ad5d77abee17d484f6b758f9e14fe5d143f7353402799","ssdeep":"","tlshash":"94410ddcb2832117865ac198636f5104652f897ba8c02213b1ed439d2f5a01e5ff9d9e","first_seen":"2025-10-09T11:39:06.430617Z","last_seen":"2025-10-19T15:27:18.531453Z","times_seen":9,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/encryption.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/encryption.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOVk2sMNrvXWt0a0CmOcc5gSlwdBAkFky4ORq01VZ%2BmZlefZAzMxw2JkpIZNUg3mINBfOxFu1spoH1k4fDwuINXeYqufg06EhvkZjahijkUkIo8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"052c5d7459259a1564e1d5ff276f7b15\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9db56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5368,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"88907ea956b02407a46096572a032168","sha1":"bc6bd131fac97eca6aaedf849a4444b75c448c6e","sha256":"cce6834490df30d20030ed74851dc7fe1d28bbca8274789fb67c86f52b0f264d","sha512":"c8d37ffb474079b229a1f38dffb5919c97f3cf6de8f01ed3fdf04187b2af719c49239e4b914a4968173adc87eaa4b46ad12ac607f1e36dc2743525133354d3e5","ssdeep":"96:UwvVsGv6C0oRaj9BarNxiuGA3ywxdAPgMyai3vap9e:UisSDaBarNYOEPDyasap9e","tlshash":"dfb152593cf6362246a3a0f20b37e1116237f61b3715ce91fa4d47843f096689b62fd5","first_seen":"2025-10-09T11:39:06.402749Z","last_seen":"2025-10-19T15:27:18.468535Z","times_seen":9,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/bot-check.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/bot-check.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tR8zW6RWWVwwt%2BeR90E4IRObD%2BRG8v5dz%2FyNngKniSlDazxZdu5iVuF5OMRmuHOv9siRtBWRkcbIo1KUfVNluCapB0KkfSCuIv5qu0ClWT%2BnMMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b0e445b7c155dd338f99e3a35a1e5bc9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9dd56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1fd023e7efcf7b018c4bb6f7816b719e","sha1":"d177d74ae83aa1ee5bd381d7ce5dc887f65e02a5","sha256":"b7f950292ed8958100985c73cb949b41b362cdfe89eaa594baa6df1a6a3f69e1","sha512":"a6e24a5457168dc89c28afe7e97472dddfa5ff195abe5a4649e65aec4fded6721a75ad32e89278196c3cae3f99c973d048b1c03188602cf9d0e4e007f88310cc","ssdeep":"","tlshash":"1051a61438f27333261380b4c7afb10673269a67235edca9b62d53084f41e55ba33ad6","first_seen":"2025-10-09T11:39:06.422664Z","last_seen":"2025-10-19T15:27:18.47827Z","times_seen":9,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/assets/main-Bm_HS6gt.css","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /assets/main-Bm_HS6gt.css HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6reHsOup4IcMn4CosaWKe2sQZz3rEXPN9%2B0%2BXhg0JlXhaJKmfgQ2TgmAFwpxRXVcBZCbda9YQOxtMHl2qsIQpx5CHAUBl4rwYXpJwy7ETF%2FBKCo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"04d6e475745c7e10168530f4349e34d5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9de56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6043,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6042)","md5":"dfb6bfa93bc5c6969a9cb07fae16d8bc","sha1":"f71aedce4a740d42ecc6f9ee1fbda93107e6fea1","sha256":"f1002aa15932ebe252f287d5e9846ff67082d788a66def756802bf36fced8320","sha512":"360c54cf0e33375f21868685f2d5bf50566de92651e6ab578914eac1fa70379f8ce7d44fae15450ca2f238858848390eacc5a0e13696cd883697fb0ce3cfddaa","ssdeep":"96:ejTGRNtg5INTAvceF49rMHadrgJrPIxR1+ehP2:/rg5+T2LHadsJrgxR1+eR2","tlshash":"a5c16654d755200de0278291e5c0abe9603cca53f5334aafb7db791ac68219f23b3b69","first_seen":"2025-10-09T11:39:06.425187Z","last_seen":"2025-10-19T15:27:18.694764Z","times_seen":9,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/assets/logo.png","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 24840\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"46481b3a746c5f32f468ee058a70230e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx3JOtdlaBi8N33GJ9loqjMLawGn%2BwwrXBCsI3A%2BqBpUkyBv4gqtyckS9rf9TXh%2FVNAikevvS6IQGRd7d%2BEKQZFQYHgYy5K8OLqT1dc6t%2BmDa%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9e856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"bb2fe0261e66c2677c10f0b00f2b988e","sha1":"3b26afbbdb37dd8d6d80ef072c64f6bb1cb62f6e","sha256":"eca38fd0c5667c9a54331c29c89bc90b98727e97dd2c643481c7e687bc51600d","sha512":"8ebb1b809c5c413e904a3d28c69cad230a65d1f0573ca3303576e345ef6d5863cd5d269882dad600cae971855f0d223467d8040b1a356aaeecbeddc112226214","ssdeep":"768:IhSv2x/2DoUaft0kjL2X4rJ/ef5QmkP0HWE:IhSv+8qft0kc2tgFkPY","tlshash":"4cb2d0855f7740708d7c7c34046b9cd4ea982e6965d7ea90a4a74ce4332e9bf884c0fe","first_seen":"2024-12-23T10:13:13.89589Z","last_seen":"2026-05-09T21:37:11.96547Z","times_seen":24,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/referral.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/referral.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gCZG6Kby5xDxV3tq21vxeS9%2BGScFlYZuAH2lE2Uw3KPWqbz5zHNuAU15GSzD0Cyn7lnWAxD3hd56Ax0ufdmgoNwP42rcosVywEtOfLCkI2Ct9w8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7f65ea07cc8b0d8bea719980e3c23b15\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9ec56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4f0cdcaf38efe3137bbbc27a64f4652b","sha1":"ea4012279a67224de1e0f875bc98a7572d174620","sha256":"c81432f3ee981fbba1c7d47072e6767cf7141340ae10ac0d27ffc944f05f6daa","sha512":"8a85e24b0f0e1a41ad3c1c3d5ae2a3b0170e282f95264bde461f9459f4b3a999a70256f9fc05760638046805e6d93feeeef18305187b8d2668caf745fa66a9b1","ssdeep":"","tlshash":"7e510058a4f718314557a03a227f922923bd404f76b5d829b90d8b5c1f8df28cb72bcd","first_seen":"2025-10-09T11:39:06.409136Z","last_seen":"2025-10-19T15:27:18.491075Z","times_seen":9,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 11 Oct 2025 15:03:19 GMT\r\ndate: Sat, 11 Oct 2025 15:03:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-08-12T14:27:09.727831Z","times_seen":9271,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":222,"dns":1,"connect":24,"send":0,"wait":34,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/fingerprinting.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/fingerprinting.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uls5SZcOIE6KgMVGGr5zoIXrNDMX%2BpCHy9g2HYe%2FFRTLjUtkCDdOUGYyxY%2BgNjgV3IvoqU1TVvxH8CnZecYYKdMxVX8O40pdjqd%2FkRU1FahbUoA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dc46d6d0de68444cdf0a107aa2a94d4c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9ea56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12339,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b2728031c63e5f2aa4bb9e541cb16b27","sha1":"6fbb531c1fcc68afad777ce12ba132dc2da76641","sha256":"27412c435198423b93d7faa5837fd5a3e4ed3f06374065808d38a3a0448a7ff3","sha512":"bdeb3798996d37de6e43cb3d56af6e70b1d2ca0f07c8c3f3dfcb65294572a5ca5a6085605fa6e3e3a4d259e454f168801ddef20ec750f3dd9a5664fc4d823afe","ssdeep":"192:lPfGQGSXjAGPm/tTHwyj47wD4hrGIekUR/lmQhrPVZSy/1UyGIW/TRXiQinJAvQR:lPO+6ygRlhZGNUX","tlshash":"c742b70d21b71816105f337aa74f61007632a11b3ce8fdb8794e97042f86a3a94b6fdd","first_seen":"2025-10-09T11:39:06.433044Z","last_seen":"2025-10-19T15:27:18.703072Z","times_seen":9,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/main.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"13f7235bfdf467926acb8da04eb7238c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jzYggcEpf%2BjsrnhaSf93pj3XKNu821Xu9BIzVa3XTgqtQXpUN9Lj5l%2BLT4s%2F%2BYwTfWmIofix3s0H00mDyANesj7iv1NaDrkS6Ptde0P7ArDl87Q0qDfpwl2QMSkLUmbZJL6IOmfiRbw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98cf3e56e9f056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4498\u0026min_rtt=3121\u0026rtt_var=1261\u0026sent=53\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=44315\u0026recv_bytes=3552\u0026delivery_rate=4326111\u0026cwnd=48000\u0026unsent_bytes=0\u0026cid=50bb4bb9ef6122a9\u0026ts=280\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35756,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (304)","md5":"c8c478d5e14a5119907266055763839a","sha1":"fc82d4474b79e0a25c8d4fde444a06c9d3d9456c","sha256":"49fb3fce1a028e6e6cb79566e549139e95a35f1c9a17a5db4725d96c9ce779bf","sha512":"6b8461abb402ae06602c2f3b92601226a8a6a60538061f66049257ae7224fecf89d749677f49f26bc99400e511f4e80aeaa36e3994ffb9705d843d72e53b7259","ssdeep":"384:LKz/4F6HMgmYws4N5O12Bs1ggLqRQ8eygRYgiDxUvgBZKnQCg:LKz/4F6fmYrsLTgLSQ8SJiFHBZcg","tlshash":"a2f2a71972f705350673d0bbab6ba1023332410b7685de583abd43540fc6f25aaa7bf6","first_seen":"2025-10-09T11:39:06.435582Z","last_seen":"2025-10-19T15:27:18.632396Z","times_seen":9,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation-db.com/json/","fqdn":"geolocation-db.com","domain":"geolocation-db.com","tld":"com"},"ip":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:19.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"geolocation-db.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 10:37:35 GMT","end":"Tue, 02 Dec 2025 10:37:34 GMT"},"fingerprint":{"sha1":"3C:E7:89:66:DA:14:4C:B8:29:FB:4C:42:AD:94:A5:2D:85:85:88:26","sha256":"0F:64:B9:6E:7A:48:B5:83:90:8C:21:EF:22:32:B9:DF:5B:DD:0C:D3:8F:9E:41:28:D2:C2:39:5C:4F:6E:51:2E"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: geolocation-db.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.0 (Ubuntu)\r\ndate: Sat, 11 Oct 2025 15:03:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.14.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"af629c65c781f91a82df769f639e46d3","sha1":"4aeba59f761fc8b9e0f0d0419c2923d9c00dc2cf","sha256":"77c6232f05bbf7942dcfba46016279584bc3cf11ab13bbf6f2737615f0462dd0","sha512":"123c695ad2e750ae40018fdc75acaf5cfc9c39e051c0b262bdf8eec883efc59293329dda338a082ce67d3dcb8aef7110a97bbb69b1189e3276a35ed512942dec","ssdeep":"","tlshash":"0ac0800f105c4f0fdc7b83c8511e530301251108c54a52c70ed2d7a1c2cdbac204c410","first_seen":"2023-05-05T19:56:35Z","last_seen":"2026-06-05T08:23:15.75021Z","times_seen":1567,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":115,"dns":5,"connect":34,"send":0,"wait":40,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfskuzvjjkminpgrdbul.supabase.co/functions/v1/auth-session","fqdn":"bfskuzvjjkminpgrdbul.supabase.co","domain":"bfskuzvjjkminpgrdbul.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:19.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"OPTIONS /functions/v1/auth-session HTTP/1.1\r\nHost: bfskuzvjjkminpgrdbul.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://wllt-reward.pages.dev/\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:19 GMT\r\ncontent-length: 0\r\ncf-ray: 98cf3e59bac1a41f-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://wllt-reward.pages.dev\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, X-Client-Info, Apikey, Cookie, x-session-id\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nsb-project-ref: bfskuzvjjkminpgrdbul\r\nsb-request-id: 0199d3cc-341c-7ca3-b99b-68911c6d29ce\r\nx-deno-execution-id: 6ff0080f-cd54-4338-bc6d-833ef6367a81\r\nx-sb-edge-region: eu-central-1\r\nx-served-by: supabase-edge-runtime\r\nset-cookie: __cf_bm=jBRmncRB1IAYr2u7EbHjNLjcnmM8yzmvZHzc0lIwDYY-1760194999-1.0.1.1-YdOA4NmbaZggQkHc7DE90MO66vnTW.AGbtbGSgtWJMKv5RNMgS0fRFoU49c_ZSlPU.9Owpvh__5jYO7RBVOqlIX5OUp_ptF1tnkgmlscQCY; path=/; expires=Sat, 11-Oct-25 15:33:19 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":67,"dns":3,"connect":3,"send":0,"wait":360,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:19.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 23:36:02 GMT\r\nexpires: Wed, 07 Oct 2026 23:36:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 314837\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T15:40:07.303658Z","times_seen":257347,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":82,"dns":3,"connect":8,"send":0,"wait":8,"receive":10,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfskuzvjjkminpgrdbul.supabase.co/functions/v1/auth-session","fqdn":"bfskuzvjjkminpgrdbul.supabase.co","domain":"bfskuzvjjkminpgrdbul.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:19.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"POST /functions/v1/auth-session HTTP/1.1\r\nHost: bfskuzvjjkminpgrdbul.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImJmc2t1enZqamttaW5wZ3JkYnVsIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTk1NjY4ODEsImV4cCI6MjA3NTE0Mjg4MX0.fWYQb3NwtZ7VD9p7gvEQUeSQJspilgoQdYSwleVntAg\r\nContent-Length: 2\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 115\r\ncf-ray: 98cf3e5c1c81712b-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://wllt-reward.pages.dev\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, X-Client-Info, Apikey, Cookie, x-session-id\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nsb-project-ref: bfskuzvjjkminpgrdbul\r\nsb-request-id: 0199d3cc-3596-71d8-8ede-6789cffd6dd8\r\nx-deno-execution-id: f26941f6-fcfd-4c7b-9203-cea48c4ad827\r\nx-sb-edge-region: eu-central-1\r\nx-served-by: supabase-edge-runtime\r\nset-cookie: session_id=e1cf53a2-c55e-46e4-bf41-31a24a8ed722; Path=/; Expires=Mon, 10 Nov 2025 15:03:19 GMT; SameSite=None; Secure\n__cf_bm=4fAcgUdlx30WvKtotdP0nV4Z5D.bmNHPJgdGjRgR8Oo-1760195000-1.0.1.1-1JuGrAjuIEIlgGS4z.DwqS7TgAHSljdiVoFGqbPFZz3rnC_1dDrT6W88uDZtI1SVAQg02dkhk2GnUcC5KXEBryLmeLbmFIUebd4H8_noh7s; path=/; expires=Sat, 11-Oct-25 15:33:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7855ce3df6fbf6cfae9219dde39df1a1","sha1":"37a0323db16dd122248384a5558134eb390f4fea","sha256":"814310c01eb42887acf1716a0ba6a370e732f4b1dcb38f7118f0e4570cb86449","sha512":"02cf0bb8acec9384f911dcc4d8167fdb2c6178d479453172598c783ca633232d8c8ea9f6769716dafd4def560461f6fa255d35a11db5d3a8e60622f8e94204b1","ssdeep":"","tlshash":"29b0120416152c7b8305d244d83856891eb89472a3c8400495bd400dc753cca1223b1a","first_seen":"2025-10-11T15:03:42.86384Z","last_seen":"2025-10-11T15:03:42.86384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":312,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/js/config.js","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:18.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:18 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvEXXMY%2FiYA2N8rxbJUosjttHMSvLWsSMsPH3pqZIH0%2F59t8fk6Lk0b9p16qjLlJqsbBt4WFGEhhafJ9J%2B%2FCFj1UcsqMX5tesLf3ZSCQYGs6zdU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"717c8f82db8d910f693bb29b373381a4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98cf3e56d9d756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"67eae2e51baab9244663210c48045561","sha1":"dc7af04e994cdb5ca2e6259d883d0c7370e16f0d","sha256":"694e93d3056f29179e38b23090a79d03ee6e8ae2a44541e124d14703a5ad0130","sha512":"d5fb8bf0ffcd2387d6659ebd2b27ac431470bf0e920ebd891a290a1755e6ea6ee2cec62ce4f4e114b38e08ea0fc9b434271ac1c6c30b4fe914252713f856de2a","ssdeep":"","tlshash":"d601c99b94ea851342023ee2d49f2e6f0a2563b43c8693a4809e217c315bac2a75b01f","first_seen":"2025-10-09T11:39:06.419985Z","last_seen":"2025-10-19T15:27:18.682924Z","times_seen":9,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:19.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 23:36:02 GMT\r\nexpires: Wed, 07 Oct 2026 23:36:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 314837\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-12T15:40:07.303658Z","times_seen":257347,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":153,"dns":3,"connect":20,"send":0,"wait":8,"receive":5,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wllt-reward.pages.dev/assets/logo-ku8VrSBq.png","fqdn":"wllt-reward.pages.dev","domain":"wllt-reward.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:19.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wllt-reward.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 19:03:17 GMT","end":"Thu, 08 Jan 2026 20:02:07 GMT"},"fingerprint":{"sha1":"1D:64:1C:D6:77:DE:AA:D5:09:A1:D3:FE:03:3B:F5:C8:70:0A:6B:25","sha256":"6F:A9:DF:F7:5B:65:8E:01:F7:79:F2:FF:3F:BD:42:12:99:E1:BB:90:26:35:BE:88:24:0A:AE:98:ED:34:BC:C4"}}},"request":{"raw":"GET /assets/logo-ku8VrSBq.png HTTP/1.1\r\nHost: wllt-reward.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: deviceId=56f33fb02f189aaf45e85f67539737d22f70d798951c02280601c181c30d57a9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 24840\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"46481b3a746c5f32f468ee058a70230e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rx0zMGw2%2BtoGZa9DMYVm0S%2Frxc%2FBzLF4A%2BJ08iikwQ4gDDnZs1Afba6hVdB%2BhusM%2B%2FBK3PEoFYSuBUzG5Edp4C1hStF5Y0SG7EuhXQP4TJ%2ByKuI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98cf3e5b0dbc56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"bb2fe0261e66c2677c10f0b00f2b988e","sha1":"3b26afbbdb37dd8d6d80ef072c64f6bb1cb62f6e","sha256":"eca38fd0c5667c9a54331c29c89bc90b98727e97dd2c643481c7e687bc51600d","sha512":"8ebb1b809c5c413e904a3d28c69cad230a65d1f0573ca3303576e345ef6d5863cd5d269882dad600cae971855f0d223467d8040b1a356aaeecbeddc112226214","ssdeep":"768:IhSv2x/2DoUaft0kjL2X4rJ/ef5QmkP0HWE:IhSv+8qft0kc2tgFkPY","tlshash":"4cb2d0855f7740708d7c7c34046b9cd4ea982e6965d7ea90a4a74ce4332e9bf884c0fe","first_seen":"2024-12-23T10:13:13.89589Z","last_seen":"2026-05-09T21:37:11.96547Z","times_seen":24,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfskuzvjjkminpgrdbul.supabase.co/functions/v1/auth/user","fqdn":"bfskuzvjjkminpgrdbul.supabase.co","domain":"bfskuzvjjkminpgrdbul.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:20.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"OPTIONS /functions/v1/auth/user HTTP/1.1\r\nHost: bfskuzvjjkminpgrdbul.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-session-id\r\nReferer: https://wllt-reward.pages.dev/\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:20 GMT\r\ncontent-length: 0\r\ncf-ray: 98cf3e5e2e6fa41f-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://wllt-reward.pages.dev\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, X-Client-Info, Apikey, Cookie, x-session-id\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nsb-project-ref: bfskuzvjjkminpgrdbul\r\nsb-request-id: 0199d3cc-36e5-7f99-92a1-410866796f19\r\nx-deno-execution-id: bbc93ab1-7cd0-4569-9527-ab090b569704\r\nx-sb-edge-region: eu-central-1\r\nx-served-by: supabase-edge-runtime\r\nset-cookie: __cf_bm=3Zm0bHVfOtzXVWhUDWzMowE7OpfbkBRp317X1tCYwgY-1760195000-1.0.1.1-Fh_9u9fwMkuvXJCDPlCZDW54tbohrzJiOZ3W_KYcVIWWU54Z_yC_._F6H86QbOkd9qSEhQn376Yb_2JZDnis8NO15Qdkp2SlaD7h7szhrVM; path=/; expires=Sat, 11-Oct-25 15:33:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfskuzvjjkminpgrdbul.supabase.co/functions/v1/auth/user","fqdn":"bfskuzvjjkminpgrdbul.supabase.co","domain":"bfskuzvjjkminpgrdbul.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wllt-reward.pages.dev/","date":"2025-10-11T15:03:20.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 05:19:40 GMT","end":"Fri, 05 Dec 2025 06:19:15 GMT"},"fingerprint":{"sha1":"4B:86:65:93:8D:4B:54:DE:41:ED:A0:D0:CD:1B:2D:BF:F6:88:F2:10","sha256":"62:2C:A5:93:8C:4A:C0:6D:6B:D7:9D:1F:20:10:BF:0B:6A:61:18:4D:0F:B0:C6:A5:BC:E5:A3:44:2C:29:D9:DD"}}},"request":{"raw":"GET /functions/v1/auth/user HTTP/1.1\r\nHost: bfskuzvjjkminpgrdbul.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wllt-reward.pages.dev/\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImJmc2t1enZqamttaW5wZ3JkYnVsIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTk1NjY4ODEsImV4cCI6MjA3NTE0Mjg4MX0.fWYQb3NwtZ7VD9p7gvEQUeSQJspilgoQdYSwleVntAg\r\nx-session-id: e1cf53a2-c55e-46e4-bf41-31a24a8ed722\r\nOrigin: https://wllt-reward.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session_id=e1cf53a2-c55e-46e4-bf41-31a24a8ed722\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 15:03:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 319\r\ncf-ray: 98cf3e5f9b9d2678-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://wllt-reward.pages.dev\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, X-Client-Info, Apikey, Cookie, x-session-id\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nsb-project-ref: bfskuzvjjkminpgrdbul\r\nsb-request-id: 0199d3cc-37cb-7c13-a8a1-96b6e9470b7f\r\nx-content-type-options: nosniff\r\nx-deno-execution-id: b264645a-4747-4154-b489-242d017acf5c\r\nx-sb-edge-region: eu-central-1\r\nx-served-by: supabase-edge-runtime\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=oToHSaL6S5S2H7RK04IfDKGu1QVjp7qKjnl.mDGErx0-1760195000-1.0.1.1-IvhTOuv9mdK2ih85RohHZctoSFpRFYgBhKa0kvD7bEq.3tIcJVPm.i1_.B7azNGD0rrzAZuanAYzy1oKr8Tic3KdDimMsSttbjFCvAw5Qgg; path=/; expires=Sat, 11-Oct-25 15:33:20 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6cb9e8527280eea6a8e171db614d52ab","sha1":"7265a2ddd254408ffe26247c2e789d2270bb7f2f","sha256":"4f9db00fc76318bbb9151b869b4b0e6911e0af24d0b33403f4bdc128747cb56e","sha512":"f75f1f3afdf259796a9ee239cf99328a91e4f53e402dc471a3397a82189f18c486d133ca619cf941646060e97317f2660dd13e48ab6e815ee2859cdb6475cefa","ssdeep":"","tlshash":"20e0c0d0ca741c31065d16868125b757745c783b11b45d347860ca10c0f763a01d269f","first_seen":"2025-10-11T15:03:42.866548Z","last_seen":"2025-10-11T15:03:42.866548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}