rezuke.gooredirect.xyz/go/a7c43545-6a77-405e-93d1-614a493b3146
791 B URL rezuke.gooredirect.xyz/go/a7c43545-6a77-405e-93d1-614a493b3146
IP
File type gzip compressed data, from Unix\012- data
Hash 739cc63405b88d245307455fa6033167
60fb0c3579a6bf98d55317fa909e15179e25f7c0
28f8eefb464522170efb1f36b75ff3a211a262d14d15a2215ffa06e2241dd66b
Analyzer Verdict Alert fortinet Malware
GET /go/a7c43545-6a77-405e-93d1-614a493b3146 HTTP/1.1
Host: rezuke.gooredirect.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Thu, 25 May 2023 11:13:52 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
etag: W/"166-TFFIkRtTHkuRsAZmH8lcKFTT/SY"
set-cookie: bemob-uniq-visit:a7c43545-6a77-405e-93d1-614a493b3146=1; Domain=rezuke.gooredirect.xyz; Path=/; Expires=Fri, 26 May 2023 11:13:52 GMT; HttpOnly; Secure; SameSite=None
bemob-rotation:a7c43545-6a77-405e-93d1-614a493b3146:random:dd399a1456265ac3c15c37d3dd848f64=0-0-0; Domain=rezuke.gooredirect.xyz; Path=/; Expires=Fri, 26 May 2023 11:13:52 GMT; HttpOnly; Secure; SameSite=None
bemob-track-url=https%3A%2F%2Frewardriot.xyz%2Froot%2Fspin-MA-1%3Fbemobdata%3Dc%253Da7c43545-6a77-405e-93d1-614a493b3146..l%253D10320c0b-778b-4d7c-bbab-b81712d2411c..a%253D0..b%253D0..ts%253D1685013232180; Domain=rezuke.gooredirect.xyz; Path=/; Expires=Fri, 26 May 2023 11:13:52 GMT; HttpOnly; Secure; SameSite=None
x-response-time: 9.213ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
rewardriot.xyz/root/spin-ma-1/img/cash.png
200 OK 68 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/cash.png
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type PNG image data, 588 x 424, 8-bit colormap, non-interlaced\012- data
Hash 190f60402826e3aecf137c77f24e235b
65bdbb38575f66351d09d5247433bd6c152c2133
5b18a98055c0eb14e0e3e2076dd2a773a0f18b26fb220a44946230de25bfd483
GET /root/spin-ma-1/img/cash.png HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/png
content-length: 67975
cache-control: public, max-age=14400, must-revalidate
etag: "fee4fc4fcedc4ca44a70b2975286c389-ssl"
x-nf-request-id: 01H17WMJQS6FFCHYTG1KZV9EGC
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IDMsmXyYnntPSHekpOr2ADtewYSY5tHk7Ng1jfiS1TUCAUnlCuaqv0CY16y%2F%2FSQwbAyRDZ2j9IH52xncVXaRmFTibUoiTtD34gb5ELfCLo1lrFyyPUeFmFjEyR9nySPk3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a0698d8fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/4.jpg
200 OK 21 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/4.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x400, components 3\012- data
Hash 5c6bd23de24730e4b4b37730dd74aef8
6ad9ac3a16e2cd8521eeb8d918f0ceb383fb1f90
2fa0af8cb1cffe84b9fadb389a4750f9fe8a5a1ff0a3bce12ec329d4c5e9bcd8
GET /root/spin-ma-1/img/4.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 21109
cache-control: public, max-age=14400, must-revalidate
etag: "143c69aaf1e8ba0aabf3dd9ec1d9e445-ssl"
x-nf-request-id: 01H17WMJPW6V6EX2DECCQFVNJB
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tPkE%2BbPxFAgCdCVanKqf9ZQKbD2Sb5X3CIvbVdaIZs58PLERAldUpynoEPngJgXnreVe%2FFczWXYja47wX9U1rYwZ6MJr42Q0QayPeYlje93FJwcYxmK6ZyvYF36F24uJXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06b8f3fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-MA-1?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
301 Moved Permanently 13 kB URL User Request GET HTTP/2 rewardriot.xyz/root/spin-MA-1?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
IP
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type gzip compressed data, from Unix\012- data
Hash 691e07565360158530233d74c090bc59
adb19f8796403cb2ebee9596892773b0d7e5235f
2cd195b23baa4f60a125d0095fc3de5cadcf48b9164d51a5baed91e8f6c1e777
GET /root/spin-MA-1?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180 HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 25 May 2023 11:13:53 GMT
content-type: text/html; charset=UTF-8
accept-ranges: bytes
age: 49917
cache-control: public, max-age=0, must-revalidate
location: /root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
x-nf-request-id: 01H199TZME0WJX1N2PCCHNER64
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uaWcTmYw%2BKvgL9eqgcILozx1XoD9X8AQtn0pPDdYD4h%2FXBCxVpZqafnfCC%2BlU5UwRWMAf5JzOyVpmT8A8H15pqdTEdg0RjDE2UeqA1lWS3B9wyOX20lhrIeVxYqYKb0bNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a037fefb529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rewardriot.xyz/root/spin-ma-1/img/5.jpg
200 OK 48 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/5.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Shannon Selim], baseline, precision 8, 640x640, components 3\012- data
Hash 6b4d6ee00c74e83d9951c81d58ce9295
9594243fe36fb66f7f0cf659cd279be1cf1cc864
49950c2963d8d425b48440d5663c436b5cd6a4ee550f57912120d530c96032d2
GET /root/spin-ma-1/img/5.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 48500
cache-control: public, max-age=14400, must-revalidate
etag: "b7af897904fb4d58f4a27936259bb793-ssl"
x-nf-request-id: 01H17WMJPZ8JB314GGNZ5Z9R4D
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tSuNFkzfLqL7Blo5n%2BCuocRi%2B9niQnAvX1BD11TmlvCizzPGfNBkgtlZDtr6X7g1E3Xphk%2FvoOYYZ5giAKeb3i5EOh2ImkEqhhSOkggGs0KKIGlLpHCQJmINBvRe%2FJfxEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06b8f6fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/smiley.png
200 OK 5.0 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/smiley.png
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 6a1b1fb2c9a70e8bb232985a5e7c76f2
a371f8e561576cb893e897f1e156597d3abbd0be
68c86e51e47a972e3191621e48685c0d9d1e166235cd816dc74370bc439567fc
GET /root/spin-ma-1/img/smiley.png HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/png
content-length: 4992
cache-control: public, max-age=14400, must-revalidate
etag: "a770a97f2ef0e3b3edd238062c9e3313-ssl"
x-nf-request-id: 01H17WMJR6EC3P653ERFA3EQZE
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BRCMiDfwX6ypsgQ%2FQmsCVGD9Qe7Tl9fyFc0PK%2F2AN7bRSXq41WltOLY0z%2FyCi8M7uO7ce9%2B6srYyIqzEl0L3ZTmvWJJmJzpiyWQCsd2yeC%2BsIlYDkBfVMPxzXM66021llw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06c8fafab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/1.jpg
200 OK 18 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/1.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=Smiling hispanic or middle eastern young man looking at the camera\377\333], baseline, precision 8, 360x360, components 3\012- data
Hash 8d4757a7ca89741ae1ef279ac277739b
e3134530778bbf711de60829f9ee270ae3309d4b
e0b4b9068a7fe672f712bb1a39080e06604c506465394214cfde2382ba52f047
GET /root/spin-ma-1/img/1.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 18232
cache-control: public, max-age=14400, must-revalidate
etag: "0fdf1d98ca06e6a3b06349fd9985af77-ssl"
x-nf-request-id: 01H17WMJQRNWRVBXVP2G0MP70E
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ag9C1p7Wxnqbw88ozwAYiFAOLs%2BT1SPPf4qjmvohjg2y975BP73I60nq36ldQ3r7YP4ENRMXGgjPDruT52xwQuBHJoCQi3rzY5r48YQkoYyPOthE66lX3jt7Ar2BFua6gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06b8f1fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/spin_vi.png
200 OK 42 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/spin_vi.png
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type PNG image data, 501 x 501, 8-bit colormap, non-interlaced\012- data
Hash 15dbf9d78ccfe133ea9682245dec8af2
e33f2dc1308fbc1c0f745d195f366438546b85a0
3709ed5cf4f7c526b05ceee82ca0dda6dfbf34aae7075c18d56ec61a11752c6c
GET /root/spin-ma-1/img/spin_vi.png HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/png
content-length: 41927
cache-control: public, max-age=14400, must-revalidate
etag: "5810c7307f7524dfccba4adea41dca11-ssl"
x-nf-request-id: 01H17WMJSFXTD9ZWH5P8A1R6V7
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S41EBD%2Bw9WBszkYBaP%2BnmYaJkZdRFpX5nrOPl8ftaVl9ryi57iwefLn0YbkgISB%2BuUZ%2BmNgM8ekqZ3QCmtvngpCUNQPyxkL%2FcHcn%2BT9wYZE0943RgFKR8QYG1wRNmvzuXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a0698d7fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/7.jpg
200 OK 26 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/7.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 480x400, components 3\012- data
Hash 22cb80edd617362c5465bc2e8f8871d0
aa39c3c8c4dfb74089b63abef0e33e74e8fe5210
eaa4bd9a29ee64b0d8e79df7304706004eb6be85fc417f7ffaa0cc7eb6541635
GET /root/spin-ma-1/img/7.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 26430
cache-control: public, max-age=14400, must-revalidate
etag: "5f713f6c2173d1bb8ea9cf3786e18e19-ssl"
x-nf-request-id: 01H17WMJQX3P2N67VPTPB7EYHJ
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RMGW%2Bx3FQwalOiSGoR5EIhQFAnCdqlgK%2FEJ%2FfWhZIZdr71xZXHKTwSvTtA3%2BKFir8meBIKhTNsbanNtfW07uY0LK4bSreHIBuIsqhH%2BcUhEfvlmD355GqxMPsS5sPnoheA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06c8f9fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/refresh.png
200 OK 1.8 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/refresh.png
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type PNG image data, 70 x 70, 8-bit colormap, non-interlaced\012- data
Hash 2d0f4539e28850747bcdf03e8c9a9f10
c400935fad4c29d04714cf5b9e74fb4d4d8f1e1d
c04fa254d43e1b6db555962ac2dbc6cd67d47aff3c1d7895a229cdaca87a688e
GET /root/spin-ma-1/img/refresh.png HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/png
content-length: 1798
cache-control: public, max-age=14400, must-revalidate
etag: "a8f2cf0e5f0e85d12faa27e61c1d49a3-ssl"
x-nf-request-id: 01H17WMJR3RJ08CX2PB1WPXD9V
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nfOd5xhSqdXXqX68D%2FNP7JS060dFf%2F6MRIUEXojAGX6YBzCahfHUZacznkph7nlDQ5pDNFsr0DYyPjqyoa4BCK3nS1OXGqqDDF3YoENCkn07RKTsc5cVgT5KaexDRG1BGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06c8fbfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/3.jpg
200 OK 15 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/3.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=Smiling young man looking at the camera with his arms crossed\377\333], baseline, precision 8, 360x360, components 3\012- data
Hash 56612da382cd894c3d9a7066200c8987
b50307ef6d081ab84e04f3077551ef52bc677bf8
235ac72915d61b0433f01ae12e6a2a0dd5a676b0e85fdeeb67f6a5b2ea9bb63d
GET /root/spin-ma-1/img/3.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 14686
cache-control: public, max-age=14400, must-revalidate
etag: "a84fd5388db24f436ebb6879d0e97503-ssl"
x-nf-request-id: 01H17WMJQX6XKQ72J2AKJQ8DBS
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZHfhnfqAaj4%2B5rPhu1FWUX9oBtO00J2dlun0wxWtQmFxXLOpVkT6HzlpXfbXVJEXcxZSjPWCGE2x4xHePxh9kV%2Bfz18ZBWtN8SVsPpQcpkxjwdmcoI7nj8bfi8J%2FG5xw3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06b8f4fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/8.jpg
200 OK 4.8 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/8.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 240x240, components 3\012- data
Hash f1b90b01b26661e37ecdb01a4753a1bf
b6c3960258ba473581daf27df9db972540ec29ed
a8079bac57434af72b399fb198d79cbd9c46a5363096afa97398e4da4228218d
GET /root/spin-ma-1/img/8.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 4831
cache-control: public, max-age=14400, must-revalidate
etag: "b9ce8499900b91e7201edecbf1f2962e-ssl"
x-nf-request-id: 01H17WMJQX3PKF6G85BK9SZB89
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FLDuZKHBFKciSpyQm%2FFoun7RIjmYqfSXH2BrjQeNIny6ZxDgKQxe0modRhhl5%2BNdWBv4ZLAgm0UBR0OoC9NVUV3sfHx%2FIZECmuyrg%2FNERGW3HkwpIG6uzMC7Wwut5S3lDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06b8f0fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/6.jpg
200 OK 21 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/6.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=happy refuuge at camp\377\333], baseline, precision 8, 408x408, components 3\012- data
Hash ccddf6a16d3fcc1c7ba4acef48fdef50
de01377d44746d8e92c46e1a64788b5df04340d4
a6fc77c7cb826f01f0aa8c3182b8b0006125f0d5fbec3ceff93b004d14e17d01
GET /root/spin-ma-1/img/6.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 20826
cache-control: public, max-age=14400, must-revalidate
etag: "d9f71630def6a1050f1f740068adb403-ssl"
x-nf-request-id: 01H17WMJQZFF0WE207BGYEZDH5
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u2R5seRuEojUlHm80HvENyg0S4aUzWXpPwd2xS70EvgC%2Fg%2F53OIygV4xQzXHwcI1EjbZwKfqTHb33apHaI7WaL%2Fy0WpjqqyYNZ05%2FL575O1xKcVYqArNNCeY4PP6p8oA0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06c8f8fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/css/style_a.css
200 OK 2.3 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/css/style_a.css
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type CSV text\012- , ASCII text
Hash 58426b100bb2d1f7a2b9e535d1d53dbf
fad1af737566c2ac0fe6684e4dcb68b177f9a62a
8259a4387fb3e0a8fb603335e81f2aee08f315f68d23c63af03e519a3f5683b1
GET /root/spin-ma-1/css/style_a.css HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
etag: W/"1473adf58d9bbec22e785727559b8c51-ssl"
vary: Accept-Encoding
x-nf-request-id: 01H17WMJR246XBBMFTMJMP957P
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7enZitcDvfeLKlg2QVdYbtT5M%2F6hfYoRvUPuA0EXtF8uHgUHhKXl69Cm7Y%2FAWzTqel%2F1XY%2BRbK%2BdAK%2F9HedlKfte7M%2FeaEzYB3IlJWRitc6Reynk9vZjB4NJQVbhM8kIAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a0698d4fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
my.rtmark.net/p.js?f=sync&lr=1&partner=59e644fa1404f27efef72782629e0cecb87591cfb82f6c5821109f562ec86405
200 OK 697 B URL GET HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=59e644fa1404f27efef72782629e0cecb87591cfb82f6c5821109f562ec86405
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
Hash f13c33109338e48e6a54f2e727b25347
48b67871cb82299096e048d78a52f86d357d1ef0
0a1c676285b66d3c5156f60611e770e76f3b083e7128e5bac138793bb6d61b96
GET /p.js?f=sync&lr=1&partner=59e644fa1404f27efef72782629e0cecb87591cfb82f6c5821109f562ec86405 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 11:13:53 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
rewardriot.xyz/root/spin-ma-1/img/spin.png
200 OK 2.4 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/spin.png
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data
Hash 79051a4f9ac575664b4d932d577a65fc
ebae669a090fd6de43fb1854e5ba4868e8e8ffc0
0109faa660c321bbc20f82c8ba38eddd5490bc3b77d72c4b1de965a01a4f12b4
GET /root/spin-ma-1/img/spin.png HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/css/style__base.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:54 GMT
content-type: image/png
content-length: 2444
cache-control: public, max-age=14400, must-revalidate
etag: "8cf94e3e08876699f7d4768c58d88a1c-ssl"
x-nf-request-id: 01H17WMJZ1BQFHZCVCAVH5P5HN
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kRusKjh6jvH%2BBxNHUqdZAj1A%2FzeeKkvjVCa9wohyt5EEhU06RHyfWq%2FQCbJ6k5XtO2ayPYwX3Ct2XP%2FVyVi05o8EzcNu12DpmcM2MbPhHYi8M07ICbz%2BgnkYajdPua7YPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a087a47fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/img/logo.png
200 OK 2.9 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/logo.png
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Hash 05209921be4171eee0954c5ae54850f9
3c6e2db019b4483a6e9e4b77cc93734548f30087
2cde3636ca32586133a4a4967f43e3c0f0b64fb6d645d6c9482eff50124692d5
GET /root/spin-ma-1/img/logo.png HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:54 GMT
content-type: image/png
content-length: 2852
cache-control: public, max-age=14400, must-revalidate
etag: "9e05192c5a0bab692a490873ae8b7bd2-ssl"
x-nf-request-id: 01H17WMKHRKYYGRV28HWKGTWEA
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WEUUyBMpWSVoEh5So3OswVH2JOR602DXD81exFi55JzxOXGsz0Y7GLfN%2F0iKJva15G2SsMTy1fteJRQbm0bQ0IlfwkBlTj%2BpqCw0jV3ZDwOWKXt8gAu6G5nW06ATqUGNLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a09ebfffab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
200 OK 4.7 kB URL User Request GET HTTP/2 rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
IP
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (2190)
Hash 4f4afa2bd5bbd82e9705fc7ab122abbf
2ef67938c86767a26a6e7a2728cb90bb40719b8c
0c1e408f89c10364b913d2d8ca89402ff790e965513b834dd7be6d35eeffff71
GET /root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180 HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: text/html; charset=UTF-8
age: 50351
cache-control: public, max-age=0, must-revalidate
vary: Accept-Encoding
x-nf-request-id: 01H199TZPS24914VFTKVZY6A20
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=soXw%2B5cy1pcxmJnPy7UBtMeW7WmF6IdkUbAl0BWtY90c0HXARr89KU5lmT9FQV917gD897V1300rw%2FtcK7qm1CVlNtdBXWqS8CCP50OKyFFpiPLGTSShMU00k1BMS%2Fu2gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a0469afb529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
rewardriot.xyz/root/spin-ma-1/js/bioep.min.js
200 OK 17 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/js/bioep.min.js
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type ASCII text, with very long lines (874), with CRLF line terminators
Hash b4be5a852fefdae43b355f2c154e3d65
d5a07889208ed421085aa023485bec0a133e10fc
325981e28cde77631c69c478b3c5e84e7284218b0659284217f80e9766381641
GET /root/spin-ma-1/js/bioep.min.js HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
etag: W/"16322b53a3ea039d744dc303d398d1dd-ssl"
vary: Accept-Encoding
x-nf-request-id: 01H17WMJQK5W0HWW5B0PVT5R2H
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JbvnSgGloCDXTFq1nePpdP1ulZU1DXhMyQqqaJBVe2wNCmtOZNFggb%2FGyfZvzXoctRi3%2BLpg%2FkAGoyluajS9TUncrn2h53hbywXC0%2Fc1aNcFvDf4q8wNrKe8VD4FtGzcsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a0698d1fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
deefauph.com/pfe/current/micro.tag.min.js?z=5962615&sw=/sw-check-permissions-75368.js
200 OK 42 kB URL GET HTTP/2 deefauph.com/pfe/current/micro.tag.min.js?z=5962615&sw=/sw-check-permissions-75368.js
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerLet's Encrypt
Subjectdeefauph.com
Fingerprint31:9A:4F:89:02:91:AE:2A:8F:3A:45:32:15:99:BC:91:72:5F:DC:02
ValiditySun, 21 May 2023 05:15:27 GMT - Sat, 19 Aug 2023 05:15:26 GMT
File type C source, ASCII text, with very long lines (41979), with no line terminators
Hash d44fd7b96fceca8f81b472766025d0d2
237541097413baf5cd3e703413f8bc9ea538a4db
b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16
GET /pfe/current/micro.tag.min.js?z=5962615&sw=/sw-check-permissions-75368.js HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 11:13:54 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
rewardriot.xyz/root/spin-ma-1/js/en_date.js
200 OK 6.7 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/js/en_date.js
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type ASCII text, with very long lines (7106), with no line terminators
Hash ea133004ba2ee7bebc25767e49cb99ff
50c4bbb8423fe9d364798f28c8260cf66916b677
cda4a08060ba5f9871213274ab4f043f97f74311196eb4916fef50700178cff8
GET /root/spin-ma-1/js/en_date.js HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
etag: W/"3ffc4d8daf8a0279c657879a371a6eff-ssl"
vary: Accept-Encoding
x-nf-request-id: 01H17WMJQSQ4Z84WB0CNK6DF8R
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PqUQJxWsdKzT5rmCJgybPt6qQF%2BXC7RgBNkCxA8JSlxPVQ1wMp9DH8r2oRovdoVxHVDkTjNrjjFIK4sFA%2Bp6EZsZr1zODMt%2Blw0ODMY46AWoNEmejLNR%2BxzmVVM9PglhZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a0698d5fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/css/style__base.css
200 OK 19 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/css/style__base.css
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
Hash 5af9199e58d12f7d074412e74d9a3d3d
74c11cb489a368220c3144e4570ad5b34afa75c2
708ad2fb793e0817fdf6bd7b0401e172f9566033232f148439e6f42b2f3b0999
GET /root/spin-ma-1/css/style__base.css HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
etag: W/"48cda9d2e1e4882f881c36734d6c0dbf-ssl"
vary: Accept-Encoding
x-nf-request-id: 01H199V03X0TD9GV3QK716XYSQ
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T6d%2BpBXK7gcE6IM3EgvVBrGw3Y3oQRwWYYCxtRovn%2F8skTt6ZKG%2FTDTJw0OErvX8tAPEr0qG9h46BP6NQefgXhNhZn3OU%2F4pBhtozpaWSva1Q37EGf7NxRHpWXTV57s6HA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a0698d3fab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
rewardriot.xyz/root/spin-ma-1/js/jquery.min.js
200 OK 87 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/js/jquery.min.js
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type ASCII text, with very long lines (32058)
Hash 24f2e59beae1680f19632d9c1b89d730
b3a77b35c4809324ab79e64d40c4ee391234e008
39646863a414e0a84920b3a8639c0f3e8c94535e8dc051b42b485a068dc2902f
GET /root/spin-ma-1/js/jquery.min.js HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
etag: W/"ddbc6702bc953f6dedfe3543150cf865-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01H199V03B84AHS376WM8XNE3G
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WFQXyrEdguq2bjnlHjYnnD0TJjRbjX1pBrgZXX1Mc6ud6jikyYYMQ2pmDouG3M2%2FMamV6vwDjTLzKSMse%2FUTSpJ7IomxUaCwHpzCcLl2bFCUuBCkIBsqPpqSQzES0LJSeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a06c8fcfab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
deefauph.com/zone?&pub=0&zone_id=5962615&is_mobile=false&domain=rewardriot.xyz&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
200 OK 0 B URL POST HTTP/2 deefauph.com/zone?&pub=0&zone_id=5962615&is_mobile=false&domain=rewardriot.xyz&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerLet's Encrypt
Subjectdeefauph.com
Fingerprint31:9A:4F:89:02:91:AE:2A:8F:3A:45:32:15:99:BC:91:72:5F:DC:02
ValiditySun, 21 May 2023 05:15:27 GMT - Sat, 19 Aug 2023 05:15:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=5962615&is_mobile=false&domain=rewardriot.xyz&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rewardriot.xyz
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 11:13:54 GMT
content-length: 0
x-trace-id: 07494f7ad629f7ad286078757dadcb29
access-control-allow-origin: https://rewardriot.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
rewardriot.xyz/root/spin-ma-1/img/2.jpg
200 OK 8.1 kB URL GET HTTP/3 rewardriot.xyz/root/spin-ma-1/img/2.jpg
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash d3a748efcc12b64924280109f7b42c99
733dca7bef4f1f344b9bd0176ed9f8e6b38111e9
0f6c00936fa720c5c4b4bd5b410badd270114ba65d06ad148b550617a296ab17
GET /root/spin-ma-1/img/2.jpg HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: image/jpeg
content-length: 8149
cache-control: public, max-age=14400, must-revalidate
etag: "192591960bd52039aaec63c9d453a3a2-ssl"
x-nf-request-id: 01H17WMJQY2VF2JE8209BHFCS8
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qNe43i5yXUvlCAYgZY91n2WNOuY94Qafy0%2FI9NZg%2BICcu3YcWVBOsWSWhzlwBGWTZ0fjGqgFeyon8wAFO4VI7x0ba%2BAoIM4ZWTB9cw84Dlm0FkLrFAKVkcQXgivgPsiRQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a06b8f2fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
backunder.com/script.js
200 OK 911 B IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subject*.backunder.com
Fingerprint23:59:D8:C1:60:4C:DB:2F:17:D5:9F:BC:19:2F:6A:18:8A:5F:4E:B8
ValidityMon, 10 Apr 2023 23:26:53 GMT - Sun, 09 Jul 2023 23:26:52 GMT
File type ASCII text, with very long lines (920), with no line terminators
Hash f60d3d95ba5d3857d3acb6730f06767d
454bf6bf84fc040a03287bf1096d2669804627c8
5c501b55106f7ffe03902742af81cad54e109fec08e9dd005b13ecaa6cbb748e
GET /script.js HTTP/1.1
Host: backunder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 May 2023 11:13:53 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1228
etag: W/"4cc-5f2f3364b2fe4-gzip"
last-modified: Mon, 23 Jan 2023 19:14:45 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3666
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MuPrBCNUAiCgXBUyBNyeqadoXqQDAeth74mKwhhjFXBeWrzwnZqF%2B448e0DMScfAeruKWkRwfoGTMKcZU6Yyuc5IBj17j9KyENTjRuC8xm0AX2gjZlC1q8MeL%2BNqax9W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccd5a06ca95b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=59e644fa1404f27efef72782629e0cecb87591cfb82f6c5821109f562ec86405&ttl=&rurl=https%3A%2F%2Frewardriot.xyz%2Froot%2Fspin-ma-1%2F%3Fbemobdata%3Dc%3Da7c43545-6a77-405e-93d1-614a493b3146..l%3D10320c0b-778b-4d7c-bbab-b81712d2411c..a%3D0..b%3D0..ts%3D1685013232180%23
200 OK 43 B URL GET HTTP/2 my.rtmark.net/img.gif?f=sync&partner=59e644fa1404f27efef72782629e0cecb87591cfb82f6c5821109f562ec86405&ttl=&rurl=https%3A%2F%2Frewardriot.xyz%2Froot%2Fspin-ma-1%2F%3Fbemobdata%3Dc%3Da7c43545-6a77-405e-93d1-614a493b3146..l%3D10320c0b-778b-4d7c-bbab-b81712d2411c..a%3D0..b%3D0..ts%3D1685013232180%23
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=59e644fa1404f27efef72782629e0cecb87591cfb82f6c5821109f562ec86405&ttl=&rurl=https%3A%2F%2Frewardriot.xyz%2Froot%2Fspin-ma-1%2F%3Fbemobdata%3Dc%3Da7c43545-6a77-405e-93d1-614a493b3146..l%3D10320c0b-778b-4d7c-bbab-b81712d2411c..a%3D0..b%3D0..ts%3D1685013232180%23 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 11:13:54 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=eb5bbcd3511b4f3291cbc9ea7ce913b8; expires=Fri, 24 May 2024 11:13:54 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
rewardriot.xyz/sw-check-permissions-75368.js
200 OK 566 B URL GET HTTP/3 rewardriot.xyz/sw-check-permissions-75368.js
IP
Requested by https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Certificate IssuerGoogle Trust Services LLC
Subjectrewardriot.xyz
FingerprintCF:E3:DF:85:34:2A:A4:FF:07:36:24:4D:A6:06:6B:F6:C9:FA:2A:0C
ValidityThu, 18 May 2023 18:01:07 GMT - Wed, 16 Aug 2023 18:01:06 GMT
File type ASCII text, with very long lines (605), with no line terminators
Hash 720be97b55df431e3ac519499d3d1aa2
1e36945ff2f39b65fb281b7cc04557a7636994c1
7dd4c6ff9ee8f3f43b81446ab2b06e8e461b53fe7eb4e5ef0824d90a50ae0ee0
GET /sw-check-permissions-75368.js HTTP/1.1
Host: rewardriot.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://rewardriot.xyz/root/spin-ma-1/?bemobdata=c=a7c43545-6a77-405e-93d1-614a493b3146..l=10320c0b-778b-4d7c-bbab-b81712d2411c..a=0..b=0..ts=1685013232180
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 11:13:54 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
etag: W/"30ae048566e52469789fc589ebd954db-ssl"
x-nf-request-id: 01H17S03FG0ZE71S9MBCJBCT37
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v6sgcGuhQaroaxUNkVBY878jBODAiOnU0NAm06Sxdbx09wp4rb6XZuLBdZWm9SQuBZL860ce2APBNVaCzchbiLZRTgcxNfxwdCebqIY8tX2iXGRGYr4mqrIsT3m0aAdY9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccd5a0adcfefab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
3.70.16.242
172.67.131.105
139.45.195.8
104.21.27.59
0.0.0.0