{"report_id":"f09f554e-f531-4f4f-9fc6-cde6cb335bfa","version":6,"status":"done","tags":[],"date":"2026-03-13T03:58:27Z","url":{"schema":"https","addr":"onchainrewardportal.com/","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onchainrewardportal.com/","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"title":"Terminal","dom":{"size":22370,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (22018)","md5":"c12f52fbeb7647c729f4925a7879e9d8","sha1":"cddbdc1315afb13e7f460de20c3fb950ca95fc6b","sha256":"e4ac944118069d87feb30d1126bc9628bd6e9823c18af06665dfff8eafd7cade","sha512":"3309c211eee2011450b1d0f10921526efc7b3e2aad6cd2dd641ecf4aff6a7a71d5734ec259e908d322b08e0ccab07c5e926b29721a85958744cf1b2ad833dc59","ssdeep":"384:ulVphvjoNc9k0nCnvRnLMTED8ePPDI2+HM:Coc7CJLMTEXQHM","tlshash":"7fa2a634dd902d750297c5f2a2f2f33965bc824dc71654c893bd433beb84d9da92b2a8","dom_hash":"domhash0250fc1ecde906846b02ba41550c38ab","first_seen":"2026-03-13T03:58:31.895738Z","last_seen":"2026-03-13T03:58:31.895738Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"onchainrewardportal.com/","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T03:58:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"onchainrewardportal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":5658,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":2,"received_data":64534,"sent_data":1186,"comment":"","tags":null,"fingerprints":null},{"fqdn":"onchainrewardportal.com","ip":{"addr":"172.67.183.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":356542,"sent_data":1844,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onchainrewardportal.com/assets/index-cmh3hTqo.js","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a8cff272c65e076ee6c30d278e17e3b","sha1":"6e4cb462f710b4d8b719160d0a15029f4eacc45e","sha256":"e9a81b6eef211ce007276960809e5ab155ae5d9a77b8cf443762894023f1fcf6","sha512":"f6733cb7e2b8389e47a892a474d6dfd8488ca1b17cd4299bf6440a699070d5b5759182186ce1df564353eb9b698ff928bb1128ab8d3d5e320da512d7837d2da7","ssdeep":"6144:n2X9xJO/0RmcrlsAf9S2tpinPBtXEjK7/j/xDxh0a+sTUc1kt:Yts0RmGnItX11n1W","tlshash":"9f744cd832a9b62157a385e5406f020772392827340dc4a4b539fedb7b7444a61bbffe","size":338235,"data":"","first_seen":"2026-03-13T03:58:31.910396Z","last_seen":"2026-03-13T05:52:48.455202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchainrewardportal.com/","date":"2026-03-13T03:58:07.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://onchainrewardportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 19:58:51 GMT\r\nexpires: Sat, 06 Mar 2027 19:58:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547156\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-16T15:25:22.462147Z","times_seen":13014,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":166,"dns":1,"connect":14,"send":0,"wait":15,"receive":14,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainrewardportal.com/favicon.ico","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchainrewardportal.com/","date":"2026-03-13T03:58:07.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainrewardportal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 16:25:07 GMT","end":"Sat, 06 Jun 2026 16:25:06 GMT"},"fingerprint":{"sha1":"FC:2C:61:CF:17:73:CE:9E:25:02:8A:B8:22:60:AD:D2:71:17:6D:39","sha256":"91:EE:AC:DC:01:F6:A3:40:8C:0A:1C:AE:0D:40:15:C1:CF:30:78:71:59:78:27:56:CC:5B:7A:AF:67:62:2C:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: onchainrewardportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchainrewardportal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 03:58:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 08 Mar 2026 17:20:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMtXslWfO45xR6dmZtbQX65bTxCC8vVdGee0rYbLAHzGGfx4ogDuDWXKxfCfd6rHdoDS0BT1fe4cBt%2FB8nHlwpDuFY2r89DrX9D68PcbcRQDPlYEoz%2Fu\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9db81e5199334c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"06b5640095416c4a4c47068258fb0495","sha1":"63307bc2b596453808f9e6b775e25d91092ed21b","sha256":"826ae4a08d0b9f4bca552a7f6921a42a99decb13f9f3d01c15e86d8bd8f4449e","sha512":"e7cfeb86daa6ca524d352199532f7e7e4b3a0caff0e6d2f687b8bf0d28c5f7e6f2cf838d1ecc059bb2b259693de91706cf065e19216a2ef3244e2a5e6a604cd5","ssdeep":"","tlshash":"afe02b4688b18a15426016141ed0f5045e96e74747459e4475eba0b95f847c6cdcf578","first_seen":"2026-03-13T03:58:31.904166Z","last_seen":"2026-03-13T05:52:48.452318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"onchainrewardportal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchainrewardportal.com/","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T03:58:06.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainrewardportal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 16:25:07 GMT","end":"Sat, 06 Jun 2026 16:25:06 GMT"},"fingerprint":{"sha1":"FC:2C:61:CF:17:73:CE:9E:25:02:8A:B8:22:60:AD:D2:71:17:6D:39","sha256":"91:EE:AC:DC:01:F6:A3:40:8C:0A:1C:AE:0D:40:15:C1:CF:30:78:71:59:78:27:56:CC:5B:7A:AF:67:62:2C:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onchainrewardportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:58:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 08 Mar 2026 17:20:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGNg%2FEJhYtl04GSgk4b1ESetuEkz9AzGtIUUl00REaUeDr9XmrvYX49%2BLbFjtOXSMVC%2BlXuVLLMqsIwQN6zGoL7b2%2B6YKzXQE%2BIRv9NNqTk4dQUrUZss\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9db81e490f8c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"06b5640095416c4a4c47068258fb0495","sha1":"63307bc2b596453808f9e6b775e25d91092ed21b","sha256":"826ae4a08d0b9f4bca552a7f6921a42a99decb13f9f3d01c15e86d8bd8f4449e","sha512":"e7cfeb86daa6ca524d352199532f7e7e4b3a0caff0e6d2f687b8bf0d28c5f7e6f2cf838d1ecc059bb2b259693de91706cf065e19216a2ef3244e2a5e6a604cd5","ssdeep":"","tlshash":"afe02b4688b18a15426016141ed0f5045e96e74747459e4475eba0b95f847c6cdcf578","first_seen":"2026-03-13T03:58:31.904166Z","last_seen":"2026-03-13T05:52:48.452318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":20,"dns":8,"connect":1,"send":0,"wait":154,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"onchainrewardportal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchainrewardportal.com/assets/index-BxaCIfg9.css","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchainrewardportal.com/","date":"2026-03-13T03:58:06.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainrewardportal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 16:25:07 GMT","end":"Sat, 06 Jun 2026 16:25:06 GMT"},"fingerprint":{"sha1":"FC:2C:61:CF:17:73:CE:9E:25:02:8A:B8:22:60:AD:D2:71:17:6D:39","sha256":"91:EE:AC:DC:01:F6:A3:40:8C:0A:1C:AE:0D:40:15:C1:CF:30:78:71:59:78:27:56:CC:5B:7A:AF:67:62:2C:75"}}},"request":{"raw":"GET /assets/index-BxaCIfg9.css HTTP/1.1\r\nHost: onchainrewardportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchainrewardportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 03:58:06 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 08 Mar 2026 17:20:21 GMT\r\netag: W/\"69adafd5-36aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=om59Z9RR3zkArKta9QytfVoeKNfgzkrCgUkxJjW2zxfQgoQcf%2B99sOwD8l27YAYS8DiPjFM2hHJH1FRM6snFjWKmNGL6%2BBMeof%2Bo7HlE2ZWXeos0viTQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9db81e4b186a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13994,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13993)","md5":"c2b05ce4851565b42998528397acc85e","sha1":"acd9d89dc7556a8a95666586d489eb679b139d87","sha256":"2290f45ce87b5cd983da3693ed9afbac10cd14d5607b0062ef06231d12997e17","sha512":"fa316563bebaedd6b10ea71e22f7d155a87f7977fd35ccc78263d940ee526c1fb6b671123449ccfdd1ae89c9f3a28bdcebc3411583a91400802b18a04c2d3b4c","ssdeep":"192:dR01+WTd1DArrm2qSrtRXBeTHA9AI76D56S2DAS1uh8IUbcJLVoWg:uErm5SrtRXjw5gsS1ey","tlshash":"d952f8b5f264d9bbfc539cf2b29cf40ca628b099cd7052d8fa0227066bd36f1055ab11","first_seen":"2026-03-13T03:58:31.907665Z","last_seen":"2026-03-13T05:52:48.457824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"onchainrewardportal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchainrewardportal.com/assets/index-cmh3hTqo.js","fqdn":"onchainrewardportal.com","domain":"onchainrewardportal.com","tld":"com"},"ip":{"addr":"172.67.183.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchainrewardportal.com/","date":"2026-03-13T03:58:06.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainrewardportal.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 16:25:07 GMT","end":"Sat, 06 Jun 2026 16:25:06 GMT"},"fingerprint":{"sha1":"FC:2C:61:CF:17:73:CE:9E:25:02:8A:B8:22:60:AD:D2:71:17:6D:39","sha256":"91:EE:AC:DC:01:F6:A3:40:8C:0A:1C:AE:0D:40:15:C1:CF:30:78:71:59:78:27:56:CC:5B:7A:AF:67:62:2C:75"}}},"request":{"raw":"GET /assets/index-cmh3hTqo.js HTTP/1.1\r\nHost: onchainrewardportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchainrewardportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 03:58:06 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 08 Mar 2026 17:20:21 GMT\r\netag: W/\"69adafd5-5293b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BYdZuA6PSodXxUN06LeBATtakPXfqGBd31MYeGz4N7o4Owayx351Cde0oAEMD44BXmi%2BGmt6wEJNfxvq8tgT5PnhVY%2B4sIEDealgOGObckTQEWi8HVE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9db81e4b18694c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338235,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41553)","md5":"5a8cff272c65e076ee6c30d278e17e3b","sha1":"6e4cb462f710b4d8b719160d0a15029f4eacc45e","sha256":"e9a81b6eef211ce007276960809e5ab155ae5d9a77b8cf443762894023f1fcf6","sha512":"f6733cb7e2b8389e47a892a474d6dfd8488ca1b17cd4299bf6440a699070d5b5759182186ce1df564353eb9b698ff928bb1128ab8d3d5e320da512d7837d2da7","ssdeep":"6144:n2X9xJO/0RmcrlsAf9S2tpinPBtXEjK7/j/xDxh0a+sTUc1kt:Yts0RmGnItX11n1W","tlshash":"9f744cd832a9b62157a385e5406f020772392827340dc4a4b539fedb7b7444a61bbffe","first_seen":"2026-03-13T03:58:31.910396Z","last_seen":"2026-03-13T05:52:48.455202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"onchainrewardportal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"192.178.204.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchainrewardportal.com/","date":"2026-03-13T03:58:06.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchainrewardportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Mar 2026 03:58:07 GMT\r\ndate: Fri, 13 Mar 2026 03:58:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4972,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e135e56b8649087638b18ac5b8885ee1","sha1":"dbdf19cd43e551a829a1c842eb5596da0689c62c","sha256":"1d7e3e6a1f1696e1948b5f49bf7d700dc7ad8e97432a01094bffb291397dc8f7","sha512":"3bdc836d7329c586fe899001fe3450838fd453e3c6c3e8b9ae75d110f0fd12973998d354cc003b84e5531cffe6bcbce78d73901075b373711524ef46624bb195","ssdeep":"96:hOEaGxOEaXFZ8OEaKG3+OEaHOEaDJc+u6OEaKNqOpaGxOpaXFZ8OpaKG3+OpaHOK:uG+7p3ZAXYFGbep3g5XxV","tlshash":"6ca1cce1001a8404aa472cda73cfbe356d8ea1072085e5facbff19985daac76633475d","first_seen":"2025-09-30T18:44:36.114564Z","last_seen":"2026-08-10T11:58:37.887983Z","times_seen":176,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":269,"dns":1,"connect":40,"send":0,"wait":60,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchainrewardportal.com/","date":"2026-03-13T03:58:07.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://onchainrewardportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 19:58:51 GMT\r\nexpires: Sat, 06 Mar 2027 19:58:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547156\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-16T15:25:22.462147Z","times_seen":13014,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":273,"dns":2,"connect":27,"send":0,"wait":14,"receive":5,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}