{"report_id":"0066836a-e908-41f8-8c51-b13ceb969f25","version":0,"status":"done","tags":[],"date":"2026-07-22T14:57:57Z","url":{"schema":"http","addr":"robinhoodaiagent.xyz","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"title":"Robinhood Ai Agent","dom":{"size":221806,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3260)","md5":"6cad799e7488d9a0a3bdc52ff12cdb8c","sha1":"499b8710e579963b88bf789a2ed28219ade63b3e","sha256":"409b7de4dbe620de6cab90a2e8e8bbe5b1d9fb08ea2d3c7dcac9ce482ac7db35","sha512":"7d8f51d07eb9498d8fb944705b4fdc88c9d3a03f6758c813f05b4289ec40c91b052c39d9a4845c8f6b30f829843cb311faf4fee750bc1465d198e52126898023","ssdeep":"1536:G7dFL8pyt9iWIDa2puamYK/qtH3UFx5Rl/aspzZvGvevWve53ubAtsjq7fVJB6uS:G7MK7dvGvevWvy0HY4o0jdsPU","tlshash":"f024a4527af30061296b137e57ef66082660d143d90efdd87cac82988fd8fa536e235d","dom_hash":"domhasha90ef5f1d119c1cce21c26ab74cba03d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"robinhoodaiagent.xyz","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T14:57:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"robinhoodaiagent.xyz","ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-07-22T14:52:49.198917Z","last_seen":"2026-07-22T14:52:49.198917Z","alert_count":300,"request_count":75,"received_data":5472388,"sent_data":33929,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:3.28.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"kekiusmaximusa.vip","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-03","domain_rank":0,"first_seen":"2025-04-03T20:33:16.397829Z","last_seen":"2026-01-17T18:36:56.104991Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1039,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8cb760e23d83f47aa475b625bcbd5be","sha1":"12040791178730b55fff8b105c00020462f691d5","sha256":"b0694ca7e3b222abf2721f11150ec59c48161f6b62bd504e40015a51eebd05c9","sha512":"0e379d10b6207223724216791026f6369f3abd9362bda9ffa7a616a94770a915dbcadd2d2ed0fae0a1c0caa7c642e742cb3d9d93eb208a12b153eb84f9d7cb83","ssdeep":"96:BxsNt0jqf9fzq5xl8O7AEQQ1CejlejNVobVDjgqKokxwvT8i2:jsNCjw9fWdNQteKN4FjgvCgi2","tlshash":"22b141941a90fc6b35e135c8a11ba730662fc1337c1bb8c1fa21dce959e8ed187a9572","size":5407,"data":"","first_seen":"2025-04-01T21:21:15.978722Z","last_seen":"2026-07-22T14:58:07.43298Z","times_seen":3263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6204722ce78ef51151b416318f6064d8","sha1":"afc6bec27048330c2c366b906065e3b95209020e","sha256":"b5b7e30beea1bad1302b32fb0ed5ecbcc57a9e77ae5df5e799508561c738acd3","sha512":"b81d9136967f7537358004b06c8e8b142ea50c79cba0f98fa8bbcd39a4f24d8251996ab95d49da08d20188d59eebdec8dd081325716e34d683960506e5cbb752","ssdeep":"","tlshash":"e871a457766466ab60f970d1ad1f8f4bfbb2853603c4c03a86bd93542c36876d73a88c","size":3614,"data":"","first_seen":"2026-07-22T14:58:07.470896Z","last_seen":"2026-07-22T14:58:07.470896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"34334d0731c872f3e486252f2eff56d0","sha1":"9eeda3ff80be0d8f67a83ec20b1c04f3f61d3b32","sha256":"cf8187d00e44b055fb5cf0c01ec9d71979df436235a5ff5c54f3ddbfd6b6e723","sha512":"66ce6ac743d3a30b9af5248ef2b116cefdff76221b49bf8809f8565c8c61ffd2c16a74a760e7b0fb9c006934665ccbc4865a4966c4c08aa214a9bac67e4e2481","ssdeep":"","tlshash":"ab80000e8eec80ec32020f322330f208280800308002e20b8cbcb230020b28e0cabb20","size":31,"data":"","first_seen":"2026-06-24T14:35:04.35Z","last_seen":"2026-07-22T14:58:07.471962Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca80e191257149f51a23ec218352b733","sha1":"2697b24a22e3e44ff4d5c75d83db2119c4e6a29d","sha256":"bd4e6217062ecac9c9af8ac58e8ccc0b96752c3405bc0460d7d235ab87eb438c","sha512":"0cbb6660d6b1023733b257a6ea5f65b1e239eb54c8f9518b43c0ccf52773a71d3bec722f33b818d8ddf73f976633e9e013db68d4f664efcd004b228d69ed0ea8","ssdeep":"","tlshash":"8090040dcdc4d05c33010c37133d540c340f37115100f5574dd43171100515d0d33705","size":41,"data":"","first_seen":"2026-07-22T14:58:07.473175Z","last_seen":"2026-07-22T14:58:07.473175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ce644b79aa62ad1e0db2bce43f24184","sha1":"82e9b7ce18484f1a5fa01531a22c54278a9609df","sha256":"0a5ec68a2379ff382e349b572e683c41bcac06f487c67feaababbf8a0d8efae2","sha512":"1ff80bb5272842e2345d9920ba22c21b50c8c6d8fac74088587b8b4012b9b359435c364f7e718d09d06c0f669c525fcffb6a2c006ae20754f41ec5c60aceb855","ssdeep":"","tlshash":"2f11280435bf65835437b03616ffd126ba00d46f0586cd203d0c48595f84929a9d5bef","size":885,"data":"","first_seen":"2026-07-22T14:58:07.474172Z","last_seen":"2026-07-22T14:58:07.474172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb391052b7258a9ce678dda932218592","sha1":"dea3130dc224218824a31101e3272e97b117ec33","sha256":"58ab9d2866da77ccf83972344d9774bd14c88f0a30534369f67ccf29fbec6fb7","sha512":"edcfbcc83fb94ea1abfc550c1a9cfb846455596c3a04a55ddd7553907aba041fa5a222fdf0c753a8affe33618dc2da79ff838b0c0b453a70763e716c9ebf9267","ssdeep":"","tlshash":"1a11089631b7906eba6fcd3a0336010d6b1da0435c048e0bbeac3616cf8052538b1e84","size":926,"data":"","first_seen":"2026-07-16T07:17:51.530999Z","last_seen":"2026-07-22T14:58:07.475218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e60f9a5cd4cfe401af5c0a4e537aafd","sha1":"2252a5ae4916e51f44323540babec802a3a56e64","sha256":"f09c40f97e2fc7edfe62fa0ffecf79c5c17c64a4201c674518772f79f0dadf12","sha512":"f4b4d22188355ac5fabc52ce86ca43e241e6445fc079ae20d09564d73ebe7f41c4bfcab10e3ea7015e9eba27556da1b3d32462baecba9ca58f3009086ba843f7","ssdeep":"","tlshash":"d8c0121085821a1322cc19e562614f58b2eea09101d1245e55445a06e3cff6f9bdb254","size":192,"data":"","first_seen":"2026-07-22T14:58:07.476383Z","last_seen":"2026-07-22T14:58:07.476383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"48222d713ee1350f1867a43ddb5a8852","sha1":"49a70266df4733b8d042a458bdd654061d37c79e","sha256":"3fa4c271505da2ebf0dddd8786955598a62ceaf113f0795a784c1b893166dd88","sha512":"10d8d47e6c5b040593e66d0e87e5820fcd32610c8a7c21081c2e27822bcf16e4b00550fa72368f79342b0b60e46073f1ee7b73c47066ac5aa4203ea345dee2c0","ssdeep":"","tlshash":"2eb012e720144601821e82070b6b0a1d7d000cc6c9483d90b40d0434872ec55315746c","size":94,"data":"","first_seen":"2026-07-22T14:58:07.477341Z","last_seen":"2026-07-22T14:58:07.477341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"52c787d011e367986bbd3d4dde980c58","sha1":"e6698f388d3bcea13f3c37463894473b951cf849","sha256":"935062814e36ff9c96fce0c4ca37148315bbcd864ea7070d859309ded5d993a1","sha512":"c4f7b5afdf17078e15963ca403637607aa6b7380e8eb8a7f5b22aef8b5b4c4b93e143415dfef96805c00753ebaf44fd7c97bd79539969587fb6d57ad97e1a929","ssdeep":"","tlshash":"e9214c30f1b7516b2592df913ab26403b364490822057cbea654e6fd289ec349607abe","size":1212,"data":"","first_seen":"2026-07-22T14:58:07.47828Z","last_seen":"2026-07-22T14:58:07.47828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"976578e82778655e641dbd4f3ee94e0a","sha1":"41edf59c5895b27bda97135288a26b6c4a7306bf","sha256":"b450920aaacdb4b77ab5096a1dba98fc220ba597c5f4e16e95a2d8ee7af8ec65","sha512":"61ca7e5e5e4f19c6ed5e4f0db8b07994c0714221a60f0efc357a82a7c33e457bdbb7eecbfbddb6325fd0ceaf76c88b0b1eeb97e28bc380a134f643ce6b034924","ssdeep":"","tlshash":"4ed0a7ab7941438315b047c09164755e93883ee25f00999c026dd189420e99ba95783f","size":235,"data":"","first_seen":"2026-07-22T14:58:07.479293Z","last_seen":"2026-07-22T14:58:07.479293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8364110f012ac4c32b4cd8dd11b37ce","sha1":"5711f12e8aada28a57262497a2286d26bd902272","sha256":"0f401eb3ee1d07a958623ff22fffe1b1be12a8ea5d8c2bf0f1f327a4aa34ea25","sha512":"6b282b5a8d0e0ab7cf798dd5e0b3ef41beb73ec3808a1e7e3366db1cb1c3b26e88e02fd063eedee4637186dcd3917b8fbb8bdc4d333752f110fd721e0f61768b","ssdeep":"","tlshash":"eba0028230976805c905d2b85a6bfc004820158b018ede541de2ae34ef154a9748337e","size":62,"data":"","first_seen":"2023-10-27T21:58:11Z","last_seen":"2026-07-22T14:58:07.480213Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"859345ca46e8faa61bbbc0b908a9ef95","sha1":"fb6bb9173d0683a32d2c1d776fae183f8b1654ee","sha256":"66bc7b15423ccc3458342d36cbd4c789a9124d95a65203e801d084d768f92c00","sha512":"64971ee3edaf413e93fb56702a775a7bdf1b995d158a7db1bfa6447a851e1daa5b98c70a383aa0b879fa283fad0a7970c2f70175f187149b5fb21b2f4aec62ec","ssdeep":"","tlshash":"96213b256e33262b23b1fd84a0a825deb9145bd8138868ed8244e06d02dfd95a0577bf","size":1306,"data":"","first_seen":"2026-07-22T14:58:07.480807Z","last_seen":"2026-07-22T14:58:07.480807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba486fca9e3a8c1a8cdd2b87bebcebe2","sha1":"571f70c317505b13781dab10610cd714dacc1fc2","sha256":"59631629dad1355b4a6957e66c4e29ab7ceb60aca6225985ccda8606d91a5ec4","sha512":"c6373628205746a4e93c1ef45110a950ecedcf0a5b7444eaa36e99d7613edd13f7ea88cff059cdcc6acf0bd1c55584c4636c8f680d650555f18d2c4bde744e8d","ssdeep":"","tlshash":"c1510130fe27017b22e2fe687976a143a73c0a48424579bea09441bd11aed353603ffe","size":2764,"data":"","first_seen":"2026-07-22T14:58:07.481766Z","last_seen":"2026-07-22T14:58:07.481766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce7fce1feae22fcab01415d3e8590691","sha1":"7a7672290cd0e36f328cac455fc5b25859550be9","sha256":"20c5fdef397ce233a1d2fcb136c2201fbda7ac187d4ad98165fde5636579289d","sha512":"40d7f56af2aa073fb0b295a1850df14a3a64f7889cf3fcab1a42e8aaa0a1bd743ca6387e0a275b86f2fb51f8c540a5013763e183bfd2e5bf5644616705d70540","ssdeep":"","tlshash":"07b0926a6e680f1b00b04ee052a46a27afa63ea56a212848064ed088420f8429c5b03e","size":113,"data":"","first_seen":"2026-07-22T14:58:07.482827Z","last_seen":"2026-07-22T14:58:07.482827Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"949280c5d83ecb673f605513b74a1598","sha1":"270e3c019a061c711f9429d51c1d8d1049ae7e2b","sha256":"2a3e9cb96b418c9b4292e62d3d24e71f9e32e5d9b513fa876dcad779c7f2595a","sha512":"c733cc8f877ba963f70a580457870ba995ac805d85fba6b375b160e24c4eb34c6bbb7e088f8c885ac06154fbfbad590eb3e68963163e2da2c1d34030c483da60","ssdeep":"","tlshash":"7461e299a9f316c68cbb193a72ff415db6a12497a10eed437c1c56d02fa09343708a5e","size":3261,"data":"","first_seen":"2026-07-22T14:58:07.483727Z","last_seen":"2026-07-22T14:58:07.483727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"81e226e7183063e081d1b0b05aa5a7ff","sha1":"b56894a556242cc2b2ae4affc48237582ef99a5f","sha256":"c4ec9fec73f4c5264e585cc171797b3fc7d8d5aa18b2ad38c58be009e6811554","sha512":"f9dcdd01aec5a0e2623986608554664f9d0477af3f23c92450f12b23fa607c88f88262fb447118b676b5704d0ee04f7ff4ab9a44fe067259473784149128f8d5","ssdeep":"","tlshash":"b941a904f6b7a5d5b97b573e92bf111a3a7118831004ef40bd4eee400fa0b641abdbb5","size":2145,"data":"","first_seen":"2026-07-22T14:58:07.484696Z","last_seen":"2026-07-22T14:58:07.484696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"76805c8752900bdb0c99f3e61e8c9ed5","sha1":"9a4ee72fd6c1bbfc3766601ccf5d989f9cbb83e1","sha256":"8eccc226594637fe6b524d03e52a6f98f7d52fd7fbdcbe9e21845f9427e2ab60","sha512":"f1b452d86ad102966f9f0e9a7a0176512b6dcbcdbf15099d40de623e1f1e71fb0afffe58930df50dee554627b3faf79560a8e5e8a3858ca9d72fe0102fcf45f2","ssdeep":"","tlshash":"38e0c0fa750b457000cbf1237acef35c2873557bb85a6841048c8c845c38dc7113acd1","size":352,"data":"","first_seen":"2024-08-19T20:25:01.756172Z","last_seen":"2026-07-22T14:58:07.485725Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-07-22T17:20:24.034911Z","times_seen":41576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-22T18:25:38.095819Z","times_seen":903987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"225fdb497713aa2e7838def6690d35e0","sha1":"10ba9e3f215e85655994aef34d927a752172a06b","sha256":"b0fd8dc60a1f1956fec3bf36386f19d3364a86451bf93af9ef1b483dd8fb5b8c","sha512":"66c3b0e29c3e579b88b34ec1e49141e94d6ba6234b5531209db3f67a7d89c68409a668a282b75e9738b0913370d61e8e4c2e472e628d5310d65345194e0cdf30","ssdeep":"1536:pN/eY/jfzmsfCQxPmnG4RaviizVk3PKhDlr79+16rQsA+VvsvGNW5BUWQdQh6Pm7:pN/eY/zzf7Pmnha9ksZ/06Pmn9nfXJ","tlshash":"cdd3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","size":137522,"data":"","first_seen":"2025-01-07T20:41:30.666072Z","last_seen":"2026-07-22T14:58:07.456575Z","times_seen":3186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-22T17:30:47.317124Z","times_seen":260018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c416bc7ec8cc72e3e48b2891e5aea49","sha1":"60edcf2ae0e50cfb9d72ed49b50f02930eb11df1","sha256":"3f44fd111645703a0478eb394f597554a9ef27521d16c032d039d0563b1ea7a2","sha512":"1860cf1dd8d122f3821ac3d69f0d0f28225df4d6bff9df89471a8924a20a36a2f6be03691ee60d953f6a1d2b845cf5809f501d603dfd0f2005ce251a2f5f9ac6","ssdeep":"1536:rM81OaWbzhUfIJGSeuHhEhwH3oe8YPEMDEMZBywLIQd6YP60+ajrwbUT8uqaij8w:xewH+AmdwYvrlu7nsuZ/4If5","tlshash":"6af3f8523052987646cf906bb417021ef7221dadb403b4aeb9bc8cdb56b4ec63376376","size":167214,"data":"","first_seen":"2023-06-20T00:21:31Z","last_seen":"2026-07-22T14:58:07.45002Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.9","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f5b81430a3af26d3a2328accb570286","sha1":"7ed3de690b99dd909f176e5fda9a7e977c1e317f","sha256":"c1cd8c2642c15bfe3ad2489d5ab4fd2a1d697bbaa8d41d2b75e9c4978cf207ed","sha512":"8dcfd153c2357f628c2cf06609982bba44724717034101940baf5730d94e94ba63a0968d882850030d2c909346adad22b21329f6bd4734e332e9e29ff975fddf","ssdeep":"192:4v6DbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbLcpb9pPkx:4v6DbNiVii2KnpcUcpb9p8x","tlshash":"b832e988378776f052b36025947f3616b136ab74741c8850a61ad8e06db9d8fa0b3f3e","size":11556,"data":"","first_seen":"2025-02-18T04:26:12.521682Z","last_seen":"2026-07-22T14:58:07.448945Z","times_seen":3141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"76984ac942acae1ac3f69ed24b78a4f4","sha1":"7f7712acc6d8a255744dc9c0fc258a47686826e1","sha256":"ca48231e7c3c0b237483aeb5e607a4a0d35a269cca54c10e4d7accf7754a3629","sha512":"8cf94efaa4f67119de44cb1f9c51fa6437fcdfe059a175d647549bc23288ca26a90836af8e158370e39008940f2be21a2d3e4ac597ef2d85e985d34c62bf9e52","ssdeep":"96:B7GhUqdL5LSkqmBVVWDEpre1NHronx4SwQslLoGVmLUVGOremLR6irQ0B78k2:OUgL5LS4BKCr3nCGtGoQHLVDYk2","tlshash":"83b165d506949d1b25e439d8b1576b701a3ed0333c199a81fa22eddc19f8fc187ea933","size":5561,"data":"","first_seen":"2023-06-20T00:21:31Z","last_seen":"2026-07-22T14:58:07.457081Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0340daa3432491513af0f0fdf90d9a3c","sha1":"f5c963ed068b58853dfbc84ae6f72df1f1e4e574","sha256":"e0b2af8faefc08acd9a693c66baae9def17b1bb4dcab7f64ba7d141cbb98ff7e","sha512":"c4253e4477ff1e40ab77d350aa54cffa23b6e5a2d7eafddc5ac9dfeaba9e60c4101eb64b6654578b991872eff1718f21624aaa08190e5742ff2180b0a0c94160","ssdeep":"768:iRP3yjt7R8RjDKvx1QEa/A3JSJGfVgNq1w9VKEAzBc5GPTSebsvTigAUMTSX5aos:iRP36t7R8RjD8x1QEa3GfV3zEAzBc5eJ","tlshash":"6113f71231d294aa55cf48b7b0330219b3765dddb802b59cb1bdace6a471e837372bb4","size":44243,"data":"","first_seen":"2025-04-01T21:21:15.926583Z","last_seen":"2026-07-22T14:58:07.429827Z","times_seen":3247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eea0374e430cd84e676850af7f91c2c","sha1":"19d5d55fe89684671a8bcf2d8a6647ed30463eaf","sha256":"e2eff8c993f730fa09b32b9e919610dd39d40c035e9e873dd8cc34fa1f8fbf8d","sha512":"28b13b10121e8003a871c9fbac31f1bb46f353b54884f797717c0a34c53b824256c989830c295f6a3d7c80408d429410e8d71d65138fe2f8a332ac2ac3f1aae9","ssdeep":"","tlshash":"34a002098dd8509921010a2113a0b148150440274001918e7c6c72214b062490896750","size":82,"data":"","first_seen":"2026-07-22T14:58:07.486389Z","last_seen":"2026-07-22T14:58:07.486389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d79e92ec845b407074ceddaebfd93c31","sha1":"4d5570d5b1eea3fabed11ff5b99feb68a33fc3c2","sha256":"f94cd7c7a33e600e9d9aac4771e661ade5c91719ccb32b52f405b1fe2e356ad1","sha512":"4866c7fd7325346b032aa18172a484334bc8a71216c9979482adc0d853211d151d806b166ef2688d609489fef59f20c33bb3ee5ea63403e0958221431617eb58","ssdeep":"768:JeAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:JeAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"f323c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce194b0d8e237ab74","size":48393,"data":"","first_seen":"2025-04-01T21:21:15.982299Z","last_seen":"2026-07-22T14:58:07.433462Z","times_seen":3250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f7622af5e7be4bad9cfc2a3ee274059","sha1":"2ac579507e5c66bf2081fe6fd424d23597236ef7","sha256":"a323774304195e5b85ee7e0006282e22cbb7980ab6509d27d8add0928e55d8ab","sha512":"f9a0c930101eae4d7b8926e8998f53ec18d1bb9007233c178b725aa576af3bd9415fd74be2779d7072c886c88cfb1f1322f878666d181000ff938c74b9eb07fb","ssdeep":"384:3TLpcV2m6WYdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOV:3TLyV2m6WYdndptaQ9HuGJswyV/pkTAZ","tlshash":"5cb2c8063163a87a51cfc157e067420e7b378885740570ed7abc6ceba5b8d9a32eb335","size":24380,"data":"","first_seen":"2023-06-20T00:21:31Z","last_seen":"2026-07-22T14:58:07.416573Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5945db2f3337fd9f1cbef5b07b2a493","sha1":"8a11439d56af9fb27836bb5f2a30aeb35b93bb5a","sha256":"a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505","sha512":"ddfae8040510dca2e41c5f745b2ec8e349053a02409c41cbc3cbf8df1561b7c586f93090974ee6821fc27e19aba68cc6c95fabe9d9321934fb185d20a8da7a12","ssdeep":"","tlshash":"e30128b72f100835527d0a22f35d7708637100c0a60359596c58592d117ccbbd57a7ff","size":681,"data":"","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-22T17:34:51.610703Z","times_seen":26349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-22T18:25:32.641117Z","times_seen":985517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.9.2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa5cbf2ec491f9a6e9f444c9946949c4","sha1":"b45cf1233aee261a53b580c7c28d7290bc0e4fdc","sha256":"90db5217ca7d480505eac5a90a23f4a18b0b7f54829d6782f6fa898cca24530e","sha512":"de9df3d7b4acd1660b10708ca2715fb90f7359d9db1d646056fcd88d9e731d8d1815d4ac190c03c988eb36d3619ad407539f443ef9c5db80602373735bcc1bac","ssdeep":"768:uYEPx60boEcFDTHjGQoDo3oEK2AfR0cLltNmx6Eq2V2YYNuf6VzS50tyzQ6AuNdo:uYEPx600yMKNfRll/mx6E5DCdSLVNdwr","tlshash":"b5b281a623002a3604fe17e7f5daabc47671109ffa0944155878cc6e19a8fd352f1afa","size":24667,"data":"","first_seen":"2025-04-02T20:26:40.722909Z","last_seen":"2026-07-22T14:58:07.448399Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","size":40,"data":"","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-07-22T17:34:51.631321Z","times_seen":29321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d738599b30619b26ddc19464a0f6156e","sha1":"2e813296bb33f9c1f747182f92a8ff8b042a9af2","sha256":"187bf1772cbc12081afadc162a9c9a463cd710c8a023b8bfb519351770ac5c10","sha512":"17ff9a928e5baeedc39ae4e8d036ff63cca674ace32b6f21669310ee691c143982ca3e3bd33f12d0282ddac4fe4213ccd46c99cf08e22ecf9e6ccbc7e575a163","ssdeep":"384:FsCB6KboRzQcvBEx6vqD68/IfE4AoCifSM2JemNUaF6rrDW5evnmc4VDgGMNgGDa:FsCB6KboRzz20qD68/IfE4AoCifSM2JJ","tlshash":"e2829455b25130a201ff64ab539f621f72b3287ad6074020b1b7427b4ffdd8535aaf2a","size":19142,"data":"","first_seen":"2025-03-28T12:13:51.977362Z","last_seen":"2026-07-22T14:58:07.452964Z","times_seen":1298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-07-22T17:44:00.117414Z","times_seen":70593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-07-22T17:30:47.292005Z","times_seen":229297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js?ver=3.1.6","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd4f07a2e5108be01d13a4f579ae5e55","sha1":"577622c109b6fc8a27f50d43aaf4820eae02d6d9","sha256":"c0845096a7c4a6741f362ac506c94c1c7d27dc603bcc1bf64a587f76f2dbe3a1","sha512":"8c1d1391305e402f594a406a0e17667d3bf5a9d7db5a9184ef6c89ff4d52aeaea1133648cf6c64cf57b9ee9f5a8bb21e1ccc041bb1e9cc6e8d769b428627f93e","ssdeep":"384:JmG3NaPDRFJoKGv8glM9EI2tJ7BoLoNCkQ0ecGvbEoO/FpurcTWcDXjoA+sfRdu4:lY1grv8cM9EttJ7SLoNCkQ0ecGvbNO/P","tlshash":"1fa23a5a7d2079b65fda01d920bb490d61bc101f300c84a0e7deedb454bbe9a6067f2f","size":21496,"data":"","first_seen":"2024-08-03T14:39:56Z","last_seen":"2026-07-22T14:58:07.455043Z","times_seen":2320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js?ver=3.16.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b10b11d93056d1c3d52bcb6436a87aa","sha1":"a41299cc7e97db0aca4738bf4320ff37b9a5ed3a","sha256":"6307cdd7c480e1317a5eb38ee332bf3144891cbdc5e6db4057869c8de1cb4f92","sha512":"a10c5bb4cde038c54a8f4b32af1373836b7d998944fe8d550a93b628068d76f386dd0c536890305a1cfc585041ac8a2d74245627df2821b42c43e161242acecd","ssdeep":"","tlshash":"6421aa1f963a2df6b9ffab7930d0650653106427163fc6c10da085b9c218a870d9ffa1","size":1359,"data":"","first_seen":"2024-11-20T10:10:52.619991Z","last_seen":"2026-07-22T17:18:31.681108Z","times_seen":6780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js?ver=3.16.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ccbda5d9b2f39cc25fe59d9f945a670","sha1":"355019c37f9ae07216fdb790430b3d98a9ace509","sha256":"b4e758a4b26e555bcaf9b212ce1e0747f46ef7d7f24d88a7b70619a375a0b027","sha512":"63e8b051ff3f8c8a4249e600589a8521624d6d1497783e9fb8aba363e2fe6f19cef16c44700eee9ac5412666229b544a31be5e27fd0175df57aeaf0fdbaed678","ssdeep":"768:aowhQFG/zNOBtFq/4tBKjOHCgAmZIpm6+/HPGzEgTZGzOYJezUBhCdCpSfA:AhQk/zNOBtE/4tBKyigAmZ8c/HPGzEg6","tlshash":"81d2d748755474f100ef213ba09fa20973325c798a0b954579b288f84fbded92ba7f36","size":29541,"data":"","first_seen":"2025-02-11T01:49:40.223038Z","last_seen":"2026-07-22T14:58:07.429265Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"http://robinhoodaiagent.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1743690656","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.027Z","timestamp":1784732250027,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1743690656 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c50-51b4\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20916,"size_decoded":1291,"mime_type":"text/css","magic":"ASCII text","md5":"186f84b5fc0ac77e91eafaf29d75f898","sha1":"da5731d987c66c60eaa3239a8f3fe020b5a96e84","sha256":"43e864c3520ae0c45f52fbd834577dd5928d98df435f2a41b0c9b494e30818fc","sha512":"f637de3a6cab799d057fea85aea399fc18e5f945c98200505782bd6a3b6e0aa16d18263c8171c990d3471c42c90652404e378cc7a02ba28e9532c3ed71876e56","ssdeep":"384:bqjLqDqyqfwqkqRqfjPnMfKWlkjUMnft5C1jld6fcgPSjC6df3rUbjLjYfeiZQjN:bqPqDqyqoqkqRqf7nMiWlkwMnF5C1Jdi","tlshash":"57929d80445a2401eb830cc577ce7f22ae9d6144b085d5bf5ffd18a86defe2222a578e","first_seen":"2025-04-01T13:06:23.858716Z","last_seen":"2026-07-22T14:58:07.41594Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1229,"timings":{"blocked":969,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.061Z","timestamp":1784732250061,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.14.0 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c42-5f3c\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24380,"size_decoded":6985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24336)","md5":"0f7622af5e7be4bad9cfc2a3ee274059","sha1":"2ac579507e5c66bf2081fe6fd424d23597236ef7","sha256":"a323774304195e5b85ee7e0006282e22cbb7980ab6509d27d8add0928e55d8ab","sha512":"f9a0c930101eae4d7b8926e8998f53ec18d1bb9007233c178b725aa576af3bd9415fd74be2779d7072c886c88cfb1f1322f878666d181000ff938c74b9eb07fb","ssdeep":"384:3TLpcV2m6WYdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOV:3TLyV2m6WYdndptaQ9HuGJswyV/pkTAZ","tlshash":"5cb2c8063163a87a51cfc157e067420e7b378885740570ed7abc6ceba5b8d9a32eb335","first_seen":"2023-06-20T00:21:31Z","last_seen":"2026-07-22T14:58:07.416573Z","times_seen":339,"resource_available":true,"data":null}},"time_used":2526,"timings":{"blocked":2265,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/Crypto.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.081Z","timestamp":1784732250081,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/Crypto.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:37 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1d-7851\"\r\nExpires: Fri, 21 Aug 2026 14:57:37 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30801,"size_decoded":29952,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"751bc65e02e2c4ad6054aea0cd44fe07","sha1":"b1568349d0c21dd580077660032492179f46ffe3","sha256":"a08aab368893bbf675ac993924854399b6e7a7f590c2862317e1b246959526b8","sha512":"63e3409a6c514b7f635ce23a747ea4bde93c03792ab0c71f62bac1b43a616769c6b752b583a1a7379cf7b9c02e79be146cfcd5293bca23929cde49ef6eb574b2","ssdeep":"384:NyWLY+vXEXyopCD8y4JnRFeVkMQib8LRPUlDxDs2HbnY3NRwYrWhJf8m8NzVbmH8:1oakncJXbBDxzHL6NRnr+8/bmHG0J4","tlshash":"9ad2d1ecff44c546d47c27b0617f84058e9a003c26e679bfa799922f083c667198eb5b","first_seen":"2025-11-22T02:11:37.466279Z","last_seen":"2026-07-22T14:58:07.417165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7614,"timings":{"blocked":6822,"dns":0,"connect":0,"send":0,"wait":263,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.36.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:29.993Z","timestamp":1784732249993,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.36.0 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:49 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c65-4f7a\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20346,"size_decoded":4564,"mime_type":"text/css","magic":"ASCII text, with very long lines (20300)","md5":"ae9525311540f5b5cb81edcddb64f2ff","sha1":"73784a8f8caee858983325571ff178f251558866","sha256":"67fc3eecb6460d46714d08d77cd5d3f7cf5e03d2f786a1c929dcaffa7dc3e9d9","sha512":"d74d5c4cce02d5a2f22d0d01b51eba47e44fab06674e57cb43144c0b81ae3103cb015518a9951a94d3a342f531bd8c40747d37934e501f1607b717407f66ab0b","ssdeep":"192:fI877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgIb:B7iNyqEpXk8/aq8uFucbrgIb","tlshash":"a892dae4e46923c87b32c413e744f64c64d9f921cac89d19fa6f850c5ee16a316c6fb8","first_seen":"2025-05-15T11:16:55.972965Z","last_seen":"2026-07-22T14:58:07.418586Z","times_seen":3,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.006Z","timestamp":1784732250006,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nContent-Length: 198\r\nLast-Modified: Tue, 21 Jul 2026 11:47:49 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c65-c6\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198,"size_decoded":542,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"97db8103f62ef845cbe078e37073b483","sha1":"3c9d293b60aff72e6ae2c13fd5848565c0964d0c","sha256":"dad3795cefb3d9f5dc2cb4a6e621043322cc94cd90170f28f25b8a0c3eda7633","sha512":"873a257478fdb7ae3b1fa586e1ef97245f9381eadcc08811f95dc25f0fff20fa5f8137de00b18a1e27aa119fd6e622ef09c8c97e80dc425ac758555b430a0aad","ssdeep":"","tlshash":"2ad012f5ff0350080297032340ca2a5ac97cbec225111c7eb324100f00a384a778ba33","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-07-22T17:55:42.722199Z","times_seen":31494,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.008Z","timestamp":1784732250008,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:11 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3f-729\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1833,"size_decoded":747,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793)","md5":"a752d79700ce8c09553d43977d56b996","sha1":"968fb280f1bcfb8878f91ec6f6d06624eee16d1b","sha256":"5f62f1ddca590301b4fb324e0821745bc760d3deb420384c39b7a54c9266401a","sha512":"2e574e8c0f033d67076a43cf5f67762cbc7becff1e6fa91f86e3a208d4dd1213260050b3babf8dcb9c5db385752b7e167103ba84746f5da7b8edb398ec9f1bf9","ssdeep":"","tlshash":"12312750bd07662cb87fa60f8413129c658490dee581ccc6cba1f60aa2fcee33336935","first_seen":"2025-04-07T06:02:40.08462Z","last_seen":"2026-07-22T14:58:07.420365Z","times_seen":1062,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":488,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.045Z","timestamp":1784732250045,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 40\r\nLast-Modified: Tue, 21 Jul 2026 11:48:25 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c89-28\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":397,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-07-22T17:34:51.631321Z","times_seen":29321,"resource_available":true,"data":null}},"time_used":1738,"timings":{"blocked":1478,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js?ver=3.16.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.048Z","timestamp":1784732250048,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/js/extension-reading-progress-bar.min.js?ver=3.16.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c4c-54f\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1359,"size_decoded":977,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1359), with no line terminators","md5":"1b10b11d93056d1c3d52bcb6436a87aa","sha1":"a41299cc7e97db0aca4738bf4320ff37b9a5ed3a","sha256":"6307cdd7c480e1317a5eb38ee332bf3144891cbdc5e6db4057869c8de1cb4f92","sha512":"a10c5bb4cde038c54a8f4b32af1373836b7d998944fe8d550a93b628068d76f386dd0c536890305a1cfc585041ac8a2d74245627df2821b42c43e161242acecd","ssdeep":"","tlshash":"6421aa1f963a2df6b9ffab7930d0650653106427163fc6c10da085b9c218a870d9ffa1","first_seen":"2024-11-20T10:10:52.619991Z","last_seen":"2026-07-22T17:18:31.681108Z","times_seen":6780,"resource_available":true,"data":null}},"time_used":1998,"timings":{"blocked":1738,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.605Z","timestamp":1784732253605,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743690639\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:35 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40128\r\nLast-Modified: Tue, 21 Jul 2026 11:47:42 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c5e-9cc0\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":40408,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-22T18:21:50.532498Z","times_seen":940918,"resource_available":false,"data":null}},"time_used":2394,"timings":{"blocked":2128,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/binance.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.080Z","timestamp":1784732250080,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/binance.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:37 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1d-a7ed\"\r\nExpires: Fri, 21 Aug 2026 14:57:36 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42989,"size_decoded":42259,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a9d9fd0670a3f3814f3d3a3164c8fcf7","sha1":"0b033733ba86ca2c225ada83236c723d388e14b7","sha256":"24212ce8b45aad90fcfee5d92b3bf461a588698b824eb7e7cd9d5e2116822a00","sha512":"3a482210ddeb243b8cf75990db15fd14dace009b9184b9da37810eb0d3ce7a675c7625331f3fa5d567116035a29f8562f7674f19dd3d600e5a8ae51fbdb737c1","ssdeep":"768:7n3fVuL27RoShWhr/R5qMB531KNv70A1hcmP26Lp9OblaOMv4Z9C+EBcyChx80:7n3fVYJSOH35INAQhLBEbHMwZg+bfZ","tlshash":"db13e0de61f23db3e0dedcf900d213517e1598b4892b4e55687eee9f0d3ca89301929a","first_seen":"2025-11-22T02:11:37.568278Z","last_seen":"2026-07-22T14:58:07.422566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7237,"timings":{"blocked":6715,"dns":0,"connect":0,"send":0,"wait":262,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T14:57:28.541Z","timestamp":1784732248541,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T18:24:27.697275Z","times_seen":17457126,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.024Z","timestamp":1784732250024,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:55 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c6b-78cf\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30927,"size_decoded":7456,"mime_type":"text/css","magic":"ASCII text, with very long lines (30765)","md5":"7c7b13d01674f00e58ad36d850b24700","sha1":"6ed7b8dd3283f2c6a271d1c1e9aa146cf50a5dbf","sha256":"e44c56ba3558ffc283eef0ecc6e022d92a10f71d6a98cdae50e6660ec716f965","sha512":"669b9168d2a76f5df16709f9ad12ab37be452be22de55af3c4e62c82804f19ccc254fbc9ff7a96cbc5d090ec911323b50800679c0f324260cb2217ccba5c6807","ssdeep":"384:tu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:Glr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"f4d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a512c5fb9","first_seen":"2023-04-10T06:34:12Z","last_seen":"2026-07-22T14:58:07.424484Z","times_seen":64,"resource_available":false,"data":null}},"time_used":989,"timings":{"blocked":723,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.032Z","timestamp":1784732250032,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:46:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c22-15601\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":31028,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-22T18:25:32.641117Z","times_seen":985517,"resource_available":true,"data":null}},"time_used":3398,"timings":{"blocked":989,"dns":0,"connect":0,"send":0,"wait":268,"receive":2141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.042Z","timestamp":1784732250042,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:48:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c8a-1e839\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124985,"size_decoded":13422,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"78178e17ad254fddc81a83f87015c1f7","sha1":"f983cb94c3d68ed626c8255721e4d3554bb485f5","sha256":"43e90036c5d53ca8cc992923f75348e6db38f7a5d78d7cf64f60aaa514b5f8b1","sha512":"1c983ceba381af23be9f3b210ab769dd1c15305e92069b0aee17fa58a4c6fcb77cd563897fc36d5e65a55b1255050ec1afb50fb7eca43e6ebf300ae98fc34005","ssdeep":"768:mGCSYRb1sJrre8pg0jSXgxH1qzCj8NIgb6MpedmxSAhVejh+duFd:mGCh2Sm1qzCj8NcLAhVe6uFd","tlshash":"cbc330d4cc4d6ac1ab78c80f4324b609dd5076e29de24c27f4af8d4d0bfaabc64e1656","first_seen":"2025-03-17T11:40:14.805494Z","last_seen":"2026-07-22T14:58:07.42624Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2264,"timings":{"blocked":1223,"dns":0,"connect":0,"send":0,"wait":261,"receive":780,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/7.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.074Z","timestamp":1784732250074,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/7.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1c-1594\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5524,"size_decoded":5662,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"df7d728242c18390cf86eb3b513bdba1","sha1":"28a0ec0cce45486b943bac35ba270b86c4305d1a","sha256":"6d69602dde7e02c19fab28b1be3cb46228ae0a354b2580b4de623de40514b118","sha512":"29329e081ff12eda62951c658bb16990fa2d2a38850ee01cdac9a491a0cae5fc56cd0b879a9ce4db55bd3a8fd381de9513d89cc094b972d2cce031886d07d234","ssdeep":"96:/myJZLOcXTJphbj/OwvSr1hXQBwmOTz0bU0o10FlKhwr564N:HLdlnj8JpNxz0ro10FlKu84N","tlshash":"49b19e93c00d79c28764ec65503d124b4b67c4d29ed4ea33e881c0b31a842fb4abe4bb","first_seen":"2025-11-22T02:11:37.50659Z","last_seen":"2026-07-22T14:58:07.426728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3644,"timings":{"blocked":3383,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.546Z","timestamp":1784732253546,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743690639\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40128\r\nLast-Modified: Tue, 21 Jul 2026 11:47:42 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c5e-9cc0\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40128,"size_decoded":40408,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-22T18:21:50.532498Z","times_seen":940918,"resource_available":false,"data":null}},"time_used":1820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":1560,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/github.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.967Z","timestamp":1784732253967,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /github.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:34 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c16-4626\"\r\nExpires: Fri, 21 Aug 2026 14:57:34 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17958,"size_decoded":17092,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ce72f15bc1586f025a8c3f3fb4d4fda2","sha1":"20c47a0348420c06c9bc44e108c096e72d43e487","sha256":"7d117cac113d2e252a2f89e2b38bab2e35abe8038f673387acfae5fe7d88442e","sha512":"462b344be04853331deb6eaf164c9881e2d790ec97202458fe22d17d1566b3345b2c6ebe92e97e140bdbeab121e3f07f0d7a8b45ab61bcbb275f1c6aec0f2911","ssdeep":"384:XJnOmSrkxqEs8bqZLVZGbs3mku26p3tAB0qXQaMvH/QAMiA4EqRxaCp7:XJOshbeVZGgWkCpeKKMHQAFI2xb7","tlshash":"4382c01add349d81d9bcff8a18ef9582a61907d83b8234145faa6217106072fce8d0eb","first_seen":"2026-07-22T14:58:07.427709Z","last_seen":"2026-07-22T14:58:07.427709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2053,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1792,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743690639","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.025Z","timestamp":1784732250025,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743690639 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c4f-17b0e\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97038,"size_decoded":3349,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"b588d180dd732888247a263000db1ab8","sha1":"83a888a9b544a592c3325738bbfb29bedf33ce67","sha256":"3c3aec018d50608dbd7a8c2a69f6ff4d6cd99d1d7cebad8626638a94d6769512","sha512":"94eb048903588235407a857528e5f125c9e8f6bd004bea7cd83bfaa69c3d81a934689fb63686079469975fc324e5ba249d6c3ddd5c4ac8ca0749ce891a71c5d2","ssdeep":"768:y0iXkrBNKmGl0CVqCiba4Kpym6vXabOMJ4aLx93yhx3sJzTGZV3AB3j:Vi9oLG5cnCz+Jcva1YT","tlshash":"74931f90001b1141a7875ce223ce7e39fe5ea2107644c136abfc5b6beedbdb152a835d","first_seen":"2025-04-01T13:06:23.80301Z","last_seen":"2026-07-22T14:58:07.428723Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":969,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js?ver=3.16.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.051Z","timestamp":1784732250051,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/js/happy-addons.min.js?ver=3.16.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c4d-7365\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29541,"size_decoded":8856,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29541), with no line terminators","md5":"8ccbda5d9b2f39cc25fe59d9f945a670","sha1":"355019c37f9ae07216fdb790430b3d98a9ace509","sha256":"b4e758a4b26e555bcaf9b212ce1e0747f46ef7d7f24d88a7b70619a375a0b027","sha512":"63e8b051ff3f8c8a4249e600589a8521624d6d1497783e9fb8aba363e2fe6f19cef16c44700eee9ac5412666229b544a31be5e27fd0175df57aeaf0fdbaed678","ssdeep":"768:aowhQFG/zNOBtFq/4tBKjOHCgAmZIpm6+/HPGzEgTZGzOYJezUBhCdCpSfA:AhQk/zNOBtE/4tBKyigAmZ8c/HPGzEg6","tlshash":"81d2d748755474f100ef213ba09fa20973325c798a0b954579b288f84fbded92ba7f36","first_seen":"2025-02-11T01:49:40.223038Z","last_seen":"2026-07-22T14:58:07.429265Z","times_seen":660,"resource_available":true,"data":null}},"time_used":2259,"timings":{"blocked":1998,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.065Z","timestamp":1784732250065,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c40-acd3\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44243,"size_decoded":13951,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44203)","md5":"0340daa3432491513af0f0fdf90d9a3c","sha1":"f5c963ed068b58853dfbc84ae6f72df1f1e4e574","sha256":"e0b2af8faefc08acd9a693c66baae9def17b1bb4dcab7f64ba7d141cbb98ff7e","sha512":"c4253e4477ff1e40ab77d350aa54cffa23b6e5a2d7eafddc5ac9dfeaba9e60c4101eb64b6654578b991872eff1718f21624aaa08190e5742ff2180b0a0c94160","ssdeep":"768:iRP3yjt7R8RjDKvx1QEa/A3JSJGfVgNq1w9VKEAzBc5GPTSebsvTigAUMTSX5aos:iRP36t7R8RjD8x1QEa3GfV3zEAzBc5eJ","tlshash":"6113f71231d294aa55cf48b7b0330219b3765dddb802b59cb1bdace6a471e837372bb4","first_seen":"2025-04-01T21:21:15.926583Z","last_seen":"2026-07-22T14:58:07.429827Z","times_seen":3247,"resource_available":true,"data":null}},"time_used":2779,"timings":{"blocked":2518,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.067Z","timestamp":1784732250067,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 681\r\nLast-Modified: Tue, 21 Jul 2026 11:48:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c91-2a9\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":681,"size_decoded":1040,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (681), with no line terminators","md5":"f5945db2f3337fd9f1cbef5b07b2a493","sha1":"8a11439d56af9fb27836bb5f2a30aeb35b93bb5a","sha256":"a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505","sha512":"ddfae8040510dca2e41c5f745b2ec8e349053a02409c41cbc3cbf8df1561b7c586f93090974ee6821fc27e19aba68cc6c95fabe9d9321934fb185d20a8da7a12","ssdeep":"","tlshash":"e30128b72f100835527d0a22f35d7708637100c0a60359596c58592d117ccbbd57a7ff","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-07-22T17:34:51.610703Z","times_seen":26349,"resource_available":true,"data":null}},"time_used":2784,"timings":{"blocked":2524,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/cropped-photo_2025-04-03_15.36.56-removebg-preview-1-32x32.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:38.307Z","timestamp":1784732258307,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/cropped-photo_2025-04-03_15.36.56-removebg-preview-1-32x32.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-22T18:24:51.84868Z","times_seen":542897,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/1.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.077Z","timestamp":1784732250077,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/1.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1a-2cc4\"\r\nExpires: Fri, 21 Aug 2026 14:57:36 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11460,"size_decoded":11615,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"57794ef257ed3dd0d894f9ca4ccaeaa1","sha1":"51bc52765b164e8695be182c4ec2a67f8ae058b5","sha256":"e43121ef9a716679828ef13098ccd32f0d01b963dcec6d19060ac2ebe3f1f3a8","sha512":"679562e2f0d1f4dea09134ce64eb5f9cb3516697669f3edb8a1c87e0a3ebea7d23c2c5a3364718ab895d181590bedeb4ba320395f24077de6a5eaabcabbc7c40","ssdeep":"192:cJG0l2cCQMdzmsRErrQVYo8FqYELcS9B1ygRR9FCUbjBCItWTvOUW:cwO2sMd7EwJ3YEYAt9lJhtWTvk","tlshash":"b632d12a691e0d4dea01373775a444e81e3f76558eccde33f98b824faac544e139234b","first_seen":"2025-11-22T02:11:37.469407Z","last_seen":"2026-07-22T14:58:07.431445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6440,"timings":{"blocked":6177,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.004Z","timestamp":1784732250004,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nContent-Length: 254\r\nLast-Modified: Tue, 21 Jul 2026 11:47:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c3e-fe\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254,"size_decoded":598,"mime_type":"text/css","magic":"ASCII text","md5":"ed1a22742654123691cf46d2c2f2281a","sha1":"cef4fdb7eed888c4afa90be15c37c5a8a4d4b51b","sha256":"7da4fb4ef56e959a6171df2d13c67a4959895d0303174cf5a45dc83e5266ec63","sha512":"b012f1cf128002826f62852c154eb754e3df91847d663289fc17c819bff93ba10a08243e612147d7cd8fa8e2cc024e4dacdac32a244ca6662f0766f71eef1c49","ssdeep":"","tlshash":"d6d05e4034678382301f596926ab2a9e78d41dd8f246cb90acb166126abacc837b2160","first_seen":"2025-04-07T06:02:40.066608Z","last_seen":"2026-07-22T14:58:07.432463Z","times_seen":2635,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.054Z","timestamp":1784732250054,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c40-151f\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5407,"size_decoded":2801,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5367)","md5":"e8cb760e23d83f47aa475b625bcbd5be","sha1":"12040791178730b55fff8b105c00020462f691d5","sha256":"b0694ca7e3b222abf2721f11150ec59c48161f6b62bd504e40015a51eebd05c9","sha512":"0e379d10b6207223724216791026f6369f3abd9362bda9ffa7a616a94770a915dbcadd2d2ed0fae0a1c0caa7c642e742cb3d9d93eb208a12b153eb84f9d7cb83","ssdeep":"96:BxsNt0jqf9fzq5xl8O7AEQQ1CejlejNVobVDjgqKokxwvT8i2:jsNCjw9fWdNQteKN4FjgvCgi2","tlshash":"22b141941a90fc6b35e135c8a11ba730662fc1337c1bb8c1fa21dce959e8ed187a9572","first_seen":"2025-04-01T21:21:15.978722Z","last_seen":"2026-07-22T14:58:07.43298Z","times_seen":3263,"resource_available":true,"data":null}},"time_used":2265,"timings":{"blocked":2005,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.055Z","timestamp":1784732250055,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:11 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3f-bd09\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48393,"size_decoded":15341,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48352)","md5":"d79e92ec845b407074ceddaebfd93c31","sha1":"4d5570d5b1eea3fabed11ff5b99feb68a33fc3c2","sha256":"f94cd7c7a33e600e9d9aac4771e661ade5c91719ccb32b52f405b1fe2e356ad1","sha512":"4866c7fd7325346b032aa18172a484334bc8a71216c9979482adc0d853211d151d806b166ef2688d609489fef59f20c33bb3ee5ea63403e0958221431617eb58","ssdeep":"768:JeAjA6wk9C+QioJHYNQAzeLHeBHmjkSK7+z1hlN14cR8+AvNKRiA8m6XS3gzlAIT:JeAjA6f9C+QiSYNQAzeLHeBHmjkOzRNM","tlshash":"f323c7853652f4f70beb40daa02f450af25619a8640df4d4bfe9dce194b0d8e237ab74","first_seen":"2025-04-01T21:21:15.982299Z","last_seen":"2026-07-22T14:58:07.433462Z","times_seen":3250,"resource_available":true,"data":null}},"time_used":2520,"timings":{"blocked":2258,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/adlamdisplay-kfohcngxkpollhx6jd8_b1zeosbska.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.548Z","timestamp":1784732253548,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/adlamdisplay-kfohcngxkpollhx6jd8_b1zeosbska.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/adlamdisplay.css?ver=1743692815\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 23928\r\nLast-Modified: Tue, 21 Jul 2026 11:47:29 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c51-5d78\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23928,"size_decoded":24208,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23928, version 1.0","md5":"065abc026498798999955a8351dda2b5","sha1":"3a80cad8bd2683a05ad23b0c735e3dccaa443141","sha256":"005f543123b13ac606ff9f905f10f9ecc5c2fa984450bcec10765abbb9f5642e","sha512":"975dc84a5f2f70b7d99181314b65ee9b95171e76328c99f128aa52316ec7e0514850db577d7614aa3228d75506a0a4e106f41c4914c09ada077111877bb66c1b","ssdeep":"384:7yvLrpx80NaXrlMChaixU6tqhVwXDhlQJQ7Q42DvcSQSThqj+LSONyUz8Q8wET/8:7yjc0irmCUixRIV8DhlQWE4Axb1vSYzv","tlshash":"23b2e20812b36720ced42f7c84055e7304f0a967d45363e86719de2cb5ae27b64e67ee","first_seen":"2024-06-29T12:52:38Z","last_seen":"2026-07-22T14:58:07.434011Z","times_seen":390,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":1048,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/nunito-xrxv3i6li01bkofineab.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.608Z","timestamp":1784732253608,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/nunito-xrxv3i6li01bkofineab.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/nunito.css?ver=1743692802\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 39124\r\nLast-Modified: Tue, 21 Jul 2026 11:47:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c52-98d4\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39124,"size_decoded":39404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39124, version 1.0","md5":"86b73ab5f530be7984b704414f2a711d","sha1":"8e297794ed7b6f5ea476d14b5270df12e8f3e42a","sha256":"1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f","sha512":"468f8d4ae9419cacdf913fba2da37055e3469d935d7b7b362717cf17d2c4c27882ea3bb34510273312dd80dc2dea05775ce65bc3f9d1048f50aad4b27e8188ac","ssdeep":"768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7","tlshash":"0e030162b507a86426818d73f65625388b034831d91f90211e80d772eb6a691e3efbdb","first_seen":"2023-09-15T03:45:56Z","last_seen":"2026-07-22T14:58:07.434569Z","times_seen":14649,"resource_available":false,"data":null}},"time_used":3191,"timings":{"blocked":2412,"dns":0,"connect":0,"send":0,"wait":260,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.000Z","timestamp":1784732250000,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c6a-e79d\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59293,"size_decoded":13265,"mime_type":"text/css","magic":"ASCII text, with very long lines (59107)","md5":"a2d937f9858c0d9f38baf5b523046e1a","sha1":"ed9d4fc860d4827f95ef3009d9c0402e1c522e51","sha256":"35039b657a30e90025795405f9276356779a69197926e8521c95dc22ad7ecb9f","sha512":"eeb77eae9f19f0a732da4ca15b06ce0e099966f6642c64cecb6c796aab599ed0254bc74c6d5972e47ada97d2634b8caa9d75de61a03ef2a1dc44f2ea388fe511","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzN:0E0PxXE4YXJgndFTfy9lt5Z","tlshash":"7943fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-07-24T16:49:56Z","last_seen":"2026-07-22T14:58:07.435116Z","times_seen":106,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":262,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.034Z","timestamp":1784732250034,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:48:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c71-3ae1\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15073,"size_decoded":4627,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-07-22T17:44:00.117414Z","times_seen":70593,"resource_available":true,"data":null}},"time_used":1489,"timings":{"blocked":1229,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/4.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.075Z","timestamp":1784732250075,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/4.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1b-16d3\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5843,"size_decoded":5988,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"e958091d8ecab0053ea0ec27a2822608","sha1":"db0a1998effc59ad202982026db633826a43c71d","sha256":"b6aae96ee76313d4c91ea00a0584d16d861728e7775de82d062d917f3cfb0e00","sha512":"f50f72f897b0e629ff98f87777d34bd880be72b9f7a8eac943f873927fc2e155e5c07b0486ebf7e427f3548388041b142c9ba0c8f7d697325bb90f3dc5953798","ssdeep":"96:d2ecQnuEsZhT/nrAVe+mLW7tBHWvB5RwXriQBQvuBvbhB5bVCksNIbKJLPPvRYNi:5TkhTUwlKWvPRwXNBnvjJCxIbCPP5YIn","tlshash":"a7c17e27e8e06c01d1a5d5df7ea7b9598a0f3d409448b427d5cac82679322b8088c1f7","first_seen":"2025-11-22T02:11:37.54657Z","last_seen":"2026-07-22T14:58:07.436968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3651,"timings":{"blocked":3383,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/nunito-xrxv3i6li01bkofineab.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.606Z","timestamp":1784732253606,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/nunito-xrxv3i6li01bkofineab.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/nunito.css?ver=1743692802\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 39124\r\nLast-Modified: Tue, 21 Jul 2026 11:47:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c52-98d4\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39124,"size_decoded":39404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39124, version 1.0","md5":"86b73ab5f530be7984b704414f2a711d","sha1":"8e297794ed7b6f5ea476d14b5270df12e8f3e42a","sha256":"1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f","sha512":"468f8d4ae9419cacdf913fba2da37055e3469d935d7b7b362717cf17d2c4c27882ea3bb34510273312dd80dc2dea05775ce65bc3f9d1048f50aad4b27e8188ac","ssdeep":"768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7","tlshash":"0e030162b507a86426818d73f65625388b034831d91f90211e80d772eb6a691e3efbdb","first_seen":"2023-09-15T03:45:56Z","last_seen":"2026-07-22T14:58:07.434569Z","times_seen":14649,"resource_available":false,"data":null}},"time_used":2653,"timings":{"blocked":2392,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/5b022bcfd2386a603fc0175bc11837da-Photoroom.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.965Z","timestamp":1784732253965,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/5b022bcfd2386a603fc0175bc11837da-Photoroom.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:34 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:45 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c25-2642\"\r\nExpires: Fri, 21 Aug 2026 14:57:34 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9794,"size_decoded":10205,"mime_type":"image/png","magic":"PNG image data, 114 x 120, 8-bit/color RGBA, non-interlaced","md5":"925a336225e7144b1c4a9336faf513fd","sha1":"b015a6671f6b7cbc01126967a1085aecdb48ffa7","sha256":"3cd1f52a13ad11a4b9687b94fdcf74c19a88c0bcbd3ff69b6f7793165b489e66","sha512":"92acfb9e275234cc75c8aa604e367ee389526673f4a293a5a476084df7586abeddefd5badafaa0620239daa65b6e32b2e19e5c71bf3ef7fa8040f04984a715ed","ssdeep":"192:Qhnuvx8GVlAuLmKF+zsSqZV4OFex0Sq8vBQT5evQ7546WacZ:QhnuvxZXAEMTqT4OFe2R8pQQvQd46bA","tlshash":"be12b0a3a4c1575e91dd596bd0e2a8b32080f1dc83fed0d2d562a11c7f61e2429df8e7","first_seen":"2026-07-22T14:58:07.438002Z","last_seen":"2026-07-22T14:58:07.438002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/Untitled-design.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.975Z","timestamp":1784732253975,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/Untitled-design.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:47:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3a-4e0af\"\r\nExpires: Fri, 21 Aug 2026 14:57:37 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319663,"size_decoded":316922,"mime_type":"image/png","magic":"PNG image data, 600 x 900, 8-bit/color RGBA, non-interlaced","md5":"cf4f18afca27364e738a18120fa7fc95","sha1":"180587dd33ba15047497e97029f919b00d5fe0aa","sha256":"399d6b3f974403682e0637a6d3c807ae5ddcde6611083aa9773fb03fbbd8226e","sha512":"b919696351c1ebb4281de1cda70d36805490abca8ce6c9287d52eae9de1770cdaad0825522b3878339ecfa6673ca701b2b83a13556739851855e5376b37b6f56","ssdeep":"6144:qcTJsSQudZIHf6E+Ho0uhjNI21KbQTwEFfYhffvjIFaatgaWXUoifVz/5TR0Eyq:qcTJ9/dZIHf6Lo0wxIx0TwEbI1rkZfdR","tlshash":"8364225c3edb327cd1999131da9ba27e276c99f0e4047f023073be966346995c3ada03","first_seen":"2026-07-22T14:58:07.439238Z","last_seen":"2026-07-22T14:58:07.439238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6967,"timings":{"blocked":3327,"dns":0,"connect":0,"send":0,"wait":261,"receive":3379,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T14:57:29.180Z","timestamp":1784732249180,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:29 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 21 Jul 2026 11:46:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c17-36e21\"\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Elementor:3.28.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":224801,"size_decoded":31830,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3262)","md5":"c733e75d6427f32d109e3e63e333fa57","sha1":"ee65d974e77ae428ea8d884ca1a851cb5f26cdc0","sha256":"0cd67c2c2c44fb3483f213975de3c6e27c9baa7baf6969239aa0f03cf477ba4a","sha512":"70e2f520c7c03a8f6c913ff1636be5b966edadc614d127652b38c993dd5ed614801f5b804dbc914f36619ca86e83795ff473c385a9d96bd8a82b21c9fca90b25","ssdeep":"1536:wTcFL8pyt9iWIDa2puamYK/qtH3UFx5Rl/as5znvGvevWve5SayH7/sxAymUVJBN:wTbKDrvGvevWvyUC7v4oIPsP7","tlshash":"d124a4567af30061292b137e57ef66082670d143d90eede87cac81888fd8f9636e275d","first_seen":"2026-07-22T14:58:07.440323Z","last_seen":"2026-07-22T14:58:07.440323Z","times_seen":1,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":4,"connect":267,"send":0,"wait":268,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/nunito-xrxv3i6li01bkofineab.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.601Z","timestamp":1784732253601,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/nunito-xrxv3i6li01bkofineab.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/nunito.css?ver=1743692802\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 39124\r\nLast-Modified: Tue, 21 Jul 2026 11:47:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c52-98d4\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39124,"size_decoded":39404,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39124, version 1.0","md5":"86b73ab5f530be7984b704414f2a711d","sha1":"8e297794ed7b6f5ea476d14b5270df12e8f3e42a","sha256":"1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f","sha512":"468f8d4ae9419cacdf913fba2da37055e3469d935d7b7b362717cf17d2c4c27882ea3bb34510273312dd80dc2dea05775ce65bc3f9d1048f50aad4b27e8188ac","ssdeep":"768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7","tlshash":"0e030162b507a86426818d73f65625388b034831d91f90211e80d772eb6a691e3efbdb","first_seen":"2023-09-15T03:45:56Z","last_seen":"2026-07-22T14:58:07.434569Z","times_seen":14649,"resource_available":false,"data":null}},"time_used":1857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1592,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kekiusmaximusa.vip/wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js","fqdn":"kekiusmaximusa.vip","domain":"kekiusmaximusa.vip","tld":"vip"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:34.004Z","timestamp":1784732254004,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.c084ef86600b6f11690d.bundle.min.js HTTP/1.1\r\nHost: kekiusmaximusa.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T18:24:27.697275Z","times_seen":17457126,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.018Z","timestamp":1784732250018,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:48:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c8c-768b\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30347,"size_decoded":3655,"mime_type":"text/css","magic":"ASCII text, with very long lines (30347), with no line terminators","md5":"809300f4834e61fc52e8fdc2d25fb9e9","sha1":"4b5294629c1c21293141b7b95de1390888bdd484","sha256":"29fede6db8f45db8a6c7278f0619ef147264940890c4aa07968a69583b189dd7","sha512":"c5ca3c08dd5101d559315e977a56919a44e7609433f16afd8d63d1f9b0ef8152003113e78e0f0746d7e5e37c4d7ad276e8d9258c68fbcab93050a706285faf28","ssdeep":"768:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFSlNBc6vzv2vBe6izi2iBPB5BQzeEnr7va:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVF3","tlshash":"52d2121ee93b3699127d8c2e13a2588d3b8480dbd1c329f6ac82de16c79dd70797944f","first_seen":"2024-12-31T13:13:08.962574Z","last_seen":"2026-07-22T14:58:07.44146Z","times_seen":16686,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":708,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css?ver=3.16.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.022Z","timestamp":1784732250022,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/fonts/style.min.css?ver=3.16.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c4c-6ab0\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27312,"size_decoded":6074,"mime_type":"text/css","magic":"ASCII text, with very long lines (27311)","md5":"6bcdc6f1fc4e170a3733c1cdb4b59f33","sha1":"45b864db945002116ef4db7e5038644e2f7a298f","sha256":"427e524ccc56fc84d2ef157a760634c93aa9b1a630cf69c9176557802a63b3f2","sha512":"2e71c78ac5ba63cb246cf76956aaa70beac461dff43f9be9f769e4a527ec1923badac7068df65c679ca1125550819142d2f5182b8f98be3a0550e223483231d8","ssdeep":"384:yN31KlD41wyt+bggxDhPipjo0Il0Wy5UtIAgwnax5Sqv+9PKuAS:yNl4DRNeAgwmoqvENAS","tlshash":"89c2c7b8e4ae8cd47375cc77c345b29d66b9f5a192490e61f03ba50c2fc16a802c5e7e","first_seen":"2025-08-06T11:36:26.189049Z","last_seen":"2026-07-22T14:58:07.441981Z","times_seen":6,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":714,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/nunito.css?ver=1743692802","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.030Z","timestamp":1784732250030,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/nunito.css?ver=1743692802 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c4e-6b18\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27416,"size_decoded":1344,"mime_type":"text/css","magic":"ASCII text","md5":"b4cd41882f74dea1b05ee609f4a59e53","sha1":"215997a3c2154ff8c0cb1b1b8bc0d68187a99e88","sha256":"631ffd865f6620ace305b63dea129f07ee376d6f1033b315acb7a2fb4f7375cf","sha512":"afe6a6cb3967012c7a0b1ffd1f2cb91c4a1d4d89e3678495c1f41b3f2ade4f31959720204019502a7fd7525a7c61fe5c9989a52a495ad488d8ee8868a53e161e","ssdeep":"384:mP2LbDcY42Wbwb/J25bNi+C20baRFD2nbHgE82yb0v7921bBm622Abe1tBPSB37d:3","tlshash":"b8c28f80042a6101e7872dc677df3e3aae8fa2407401c5366bfd45e9adabc252374f5e","first_seen":"2025-12-16T05:26:56.3941Z","last_seen":"2026-07-22T14:58:07.442997Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1235,"timings":{"blocked":974,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/27c91e09a7705d472e9bca0f18070034-Photoroom.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.631Z","timestamp":1784732253631,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/27c91e09a7705d472e9bca0f18070034-Photoroom.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c24-22d7\"\r\nExpires: Fri, 21 Aug 2026 14:57:37 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8919,"size_decoded":9311,"mime_type":"image/png","magic":"PNG image data, 144 x 126, 8-bit/color RGBA, non-interlaced","md5":"a253882fcee9bf815106f7139ecb15ce","sha1":"48817242c1ca94490834d94bece3211ccc2c2027","sha256":"23c8570fd2078b892642b48869b67b60cd71917fc60bb09eb6afe99718173eaa","sha512":"4848b98adc36f059e9204aaeaf07aef20c7525d0826594ef7c247420cc00da921017209906f51d06f38cc11aa3625b09d8a1eafdc87c16ce01bd3756386e11ee","ssdeep":"192:zOCzyIZgf9kwpOB+XHlqa63CP135za4IO1+wCEO3rgQqrkESX6:zPZgFzmqVh5zay1+zEO3rgQ1K","tlshash":"d102b0b2d4d525e6cd2ea6b732c601d0d97c2bc4584cd0e0eea085e16af1369a1fec65","first_seen":"2026-07-22T14:58:07.444059Z","last_seen":"2026-07-22T14:58:07.444059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3332,"timings":{"blocked":3071,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/5.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.076Z","timestamp":1784732250076,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/5.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1c-3bc8\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15304,"size_decoded":15457,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"21b7cca4d13bb24f1fde52ee7e71cf1e","sha1":"bf6a9ff346af51cd71098752a6e68543d967450a","sha256":"3aa751f2134477617378457eda289f401466392eac8d156cd3c90d70c803f562","sha512":"d08022e3b57694d3cfaa22fa7f8d10f4c9404bfe54a8f6f7081a5340a538f64fe4f84e06ee4d8424fb1862afea4e221bc01485b79098b01bbc9c966ecb8761f4","ssdeep":"384:vI2QrqLCoAtXAzR7dq4njpwHxg2eRY1LeW61Umk:vNQrsWX8Hjmxg2oa56G","tlshash":"6862cf76ec21266041d7c1ee208d14927d81e388df88dbe758e6cde55b22bfa04592cb","first_seen":"2025-11-22T02:11:37.486852Z","last_seen":"2026-07-22T14:58:07.445236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4237,"timings":{"blocked":3383,"dns":0,"connect":0,"send":0,"wait":261,"receive":593,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.9.2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:29.793Z","timestamp":1784732249793,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.9.2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:29 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c64-b2ab\"\r\nExpires: Thu, 23 Jul 2026 02:57:29 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45739,"size_decoded":9337,"mime_type":"text/css","magic":"ASCII text, with very long lines (43557)","md5":"7aa9be2b6bc3772350fa1059d461af6b","sha1":"25b94188cde43738f3a0e658b22401a534e5be48","sha256":"44622e9d59e3d2c9c4ffb9fc53d368e250f382ab07a3df978410eaa86556cff9","sha512":"8d47800211a8f5f6f563b4cbb3e07d41eb6041caf2763b8e51e203b732cfae06e25485b6483004ed8cf06807ba18ac84230899cdb58dd9f052eddcbd88f29de7","ssdeep":"768:mR7Ork1rhDYollnk+FHkqYCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:mVVY+tHQtBU5PTwDuaP","tlshash":"5623e86057d035391233873efad6bd082a694313d74f26e2f8ab8668c9c57c71a72a4c","first_seen":"2025-03-07T03:37:02.022924Z","last_seen":"2026-07-22T14:58:07.446309Z","times_seen":3003,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.002Z","timestamp":1784732250002,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:55 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c6b-684e\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26702,"size_decoded":4643,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-22T17:35:52.567611Z","times_seen":85526,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.9","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.020Z","timestamp":1784732250020,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.1.9 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:48:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c94-1cfa\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7418,"size_decoded":1926,"mime_type":"text/css","magic":"ASCII text, with very long lines (7417)","md5":"aeba37887d17e5ed0e8939b72abd12a6","sha1":"59747da2f95a0840cd2675f410e94356eaca6c0a","sha256":"e1312a65ba5e316f4236319758778fafdf349dc8cb26efee04bd716cda9590df","sha512":"b41b80fb202ff52ff28c7c8f9c53474d7aa76453c1f21dd12d1bef295eee6e554cb80e212d48154a9d7c64597c65084c67bc9ca5cfd2418524c1f8f5855f17ba","ssdeep":"192:8USu7icfgjw1sGbXIOjS5MLE88slOhygk:ZdDzl","tlshash":"4ee1db23bb37b3481577e53ea2ce6bb87275d2a1d2030d99e4f1a218d3de994172258c","first_seen":"2025-01-22T11:51:23.473769Z","last_seen":"2026-07-22T14:58:07.447345Z","times_seen":8648,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.033Z","timestamp":1784732250033,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:46:41 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c21-3509\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":5275,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-22T18:25:38.095819Z","times_seen":903987,"resource_available":true,"data":null}},"time_used":1490,"timings":{"blocked":1229,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/Untitled-design-2.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.969Z","timestamp":1784732253969,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/Untitled-design-2.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:34 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:47:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c37-4e0af\"\r\nExpires: Fri, 21 Aug 2026 14:57:34 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319663,"size_decoded":316922,"mime_type":"image/png","magic":"PNG image data, 600 x 900, 8-bit/color RGBA, non-interlaced","md5":"cf4f18afca27364e738a18120fa7fc95","sha1":"180587dd33ba15047497e97029f919b00d5fe0aa","sha256":"399d6b3f974403682e0637a6d3c807ae5ddcde6611083aa9773fb03fbbd8226e","sha512":"b919696351c1ebb4281de1cda70d36805490abca8ce6c9287d52eae9de1770cdaad0825522b3878339ecfa6673ca701b2b83a13556739851855e5376b37b6f56","ssdeep":"6144:qcTJsSQudZIHf6E+Ho0uhjNI21KbQTwEFfYhffvjIFaatgaWXUoifVz/5TR0Eyq:qcTJ9/dZIHf6Lo0wxIx0TwEbI1rkZfdR","tlshash":"8364225c3edb327cd1999131da9ba27e276c99f0e4047f023073be966346995c3ada03","first_seen":"2026-07-22T14:58:07.439238Z","last_seen":"2026-07-22T14:58:07.439238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":4542,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.9.2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.043Z","timestamp":1784732250043,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.9.2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c64-605b\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24667,"size_decoded":6372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24667), with no line terminators","md5":"fa5cbf2ec491f9a6e9f444c9946949c4","sha1":"b45cf1233aee261a53b580c7c28d7290bc0e4fdc","sha256":"90db5217ca7d480505eac5a90a23f4a18b0b7f54829d6782f6fa898cca24530e","sha512":"de9df3d7b4acd1660b10708ca2715fb90f7359d9db1d646056fcd88d9e731d8d1815d4ac190c03c988eb36d3619ad407539f443ef9c5db80602373735bcc1bac","ssdeep":"768:uYEPx60boEcFDTHjGQoDo3oEK2AfR0cLltNmx6Eq2V2YYNuf6VzS50tyzQ6AuNdo:uYEPx600yMKNfRll/mx6E5DCdSLVNdwr","tlshash":"b5b281a623002a3604fe17e7f5daabc47671109ffa0944155878cc6e19a8fd352f1afa","first_seen":"2025-04-02T20:26:40.722909Z","last_seen":"2026-07-22T14:58:07.448399Z","times_seen":575,"resource_available":true,"data":null}},"time_used":1737,"timings":{"blocked":1477,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.9","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.049Z","timestamp":1784732250049,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.1.9 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:48:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c94-2d24\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11556,"size_decoded":4491,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11556), with no line terminators","md5":"9f5b81430a3af26d3a2328accb570286","sha1":"7ed3de690b99dd909f176e5fda9a7e977c1e317f","sha256":"c1cd8c2642c15bfe3ad2489d5ab4fd2a1d697bbaa8d41d2b75e9c4978cf207ed","sha512":"8dcfd153c2357f628c2cf06609982bba44724717034101940baf5730d94e94ba63a0968d882850030d2c909346adad22b21329f6bd4734e332e9e29ff975fddf","ssdeep":"192:4v6DbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbLcpb9pPkx:4v6DbNiVii2KnpcUcpb9p8x","tlshash":"b832e988378776f052b36025947f3616b136ab74741c8850a61ad8e06db9d8fa0b3f3e","first_seen":"2025-02-18T04:26:12.521682Z","last_seen":"2026-07-22T14:58:07.448945Z","times_seen":3141,"resource_available":true,"data":null}},"time_used":1999,"timings":{"blocked":1738,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.059Z","timestamp":1784732250059,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:46:41 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c21-23b5\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9141,"size_decoded":4063,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-22T17:30:47.317124Z","times_seen":260018,"resource_available":true,"data":null}},"time_used":2525,"timings":{"blocked":2264,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.065Z","timestamp":1784732250065,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.14.0 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c43-28d2e\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167214,"size_decoded":40201,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65492)","md5":"7c416bc7ec8cc72e3e48b2891e5aea49","sha1":"60edcf2ae0e50cfb9d72ed49b50f02930eb11df1","sha256":"3f44fd111645703a0478eb394f597554a9ef27521d16c032d039d0563b1ea7a2","sha512":"1860cf1dd8d122f3821ac3d69f0d0f28225df4d6bff9df89471a8924a20a36a2f6be03691ee60d953f6a1d2b845cf5809f501d603dfd0f2005ce251a2f5f9ac6","ssdeep":"1536:rM81OaWbzhUfIJGSeuHhEhwH3oe8YPEMDEMZBywLIQd6YP60+ajrwbUT8uqaij8w:xewH+AmdwYvrlu7nsuZ/4If5","tlshash":"6af3f8523052987646cf906bb417021ef7221dadb403b4aeb9bc8cdb56b4ec63376376","first_seen":"2023-06-20T00:21:31Z","last_seen":"2026-07-22T14:58:07.45002Z","times_seen":137,"resource_available":true,"data":null}},"time_used":3307,"timings":{"blocked":2523,"dns":0,"connect":0,"send":0,"wait":263,"receive":521,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/Untitled-design-1.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.971Z","timestamp":1784732253971,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/Untitled-design-1.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:34 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:47:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c35-4e0af\"\r\nExpires: Fri, 21 Aug 2026 14:57:34 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":319663,"size_decoded":316922,"mime_type":"image/png","magic":"PNG image data, 600 x 900, 8-bit/color RGBA, non-interlaced","md5":"cf4f18afca27364e738a18120fa7fc95","sha1":"180587dd33ba15047497e97029f919b00d5fe0aa","sha256":"399d6b3f974403682e0637a6d3c807ae5ddcde6611083aa9773fb03fbbd8226e","sha512":"b919696351c1ebb4281de1cda70d36805490abca8ce6c9287d52eae9de1770cdaad0825522b3878339ecfa6673ca701b2b83a13556739851855e5376b37b6f56","ssdeep":"6144:qcTJsSQudZIHf6E+Ho0uhjNI21KbQTwEFfYhffvjIFaatgaWXUoifVz/5TR0Eyq:qcTJ9/dZIHf6Lo0wxIx0TwEbI1rkZfdR","tlshash":"8364225c3edb327cd1999131da9ba27e276c99f0e4047f023073be966346995c3ada03","first_seen":"2026-07-22T14:58:07.439238Z","last_seen":"2026-07-22T14:58:07.439238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":6053,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:29.995Z","timestamp":1784732249995,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:09 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3d-d01b\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53275,"size_decoded":7635,"mime_type":"text/css","magic":"ASCII text, with very long lines (53235)","md5":"f161c38d810e96eb73903616702263ff","sha1":"ff1a8a277a515945cdee105bbce3748f30be482a","sha256":"cbc525353d6697722379cdb9b4e4ed4c24265dc569b4ae2adb906b6ced226e77","sha512":"d77495a431be85dd557293e842fb2df9a2f5a49d5719c9f734a70928971f9ab5b36a23b3a0fd780de312d5b9402d9efeba8e0124b9f2723b15ce772c535cf12b","ssdeep":"384:cvrJ9/vmyeUaEMoZ0qk0e/Rmsm5Cz9TfikvmGkvmCLldlRak2ksFrOk:0LRdL2t7RglNP7skk","tlshash":"ad33fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c523dafece63b36c1b","first_seen":"2025-04-01T21:21:15.947693Z","last_seen":"2026-07-22T14:58:07.450549Z","times_seen":2838,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/css/post-32.css?ver=1743761232","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.016Z","timestamp":1784732250016,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/css/post-32.css?ver=1743761232 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3b-818a\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33162,"size_decoded":3453,"mime_type":"text/css","magic":"ASCII text","md5":"2b24436aaa9465c4df66e25306c30c0d","sha1":"28b41d6bb71b9bbb69c846bea7f5db3263e1d074","sha256":"a21a4c88f17e322734aac666222f13287fdf436bfb72e968431acd9a4b415bf3","sha512":"05ebb930db7663f60248250f1676bbff48d7587947fac2a3c6b674627913c3d0fbc8b2065166664f1addc0144063997004fd1e3be37614373809f2db277aa4e0","ssdeep":"192:b+FVubmQTWEErdJ+Lx8a3xayHqamE3xay9kGJT3xayc9OSM3xay9EnoGImbI3UU4:4oayHDay9RaycSay9BVJ9VWNME","tlshash":"41e259c17d930161b00f64af7063c6dc3a6e4dc9d07da9e6fa60a087f5b8ea533e1916","first_seen":"2026-07-22T14:58:07.451106Z","last_seen":"2026-07-22T14:58:07.451106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":458,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/adlamdisplay.css?ver=1743692815","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.029Z","timestamp":1784732250029,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/adlamdisplay.css?ver=1743692815 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c4e-48d\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1165,"size_decoded":796,"mime_type":"text/css","magic":"ASCII text","md5":"c757d7f77ec287eee763db36cccce70b","sha1":"c52ce7db34b33afafa119deb4b0a2813b70eae87","sha256":"ee40a0bde64f75c88dbda887667502738fe74eeea326a83851c36ca9c2c3c518","sha512":"bb1ac19952eee11c05f9fe4bc263f0a4334b4fdeab3b1660612992a626e15ead8a4236584a4d2b4b3910089293abee11c125e1e60fd61ce70707b2e7a79596b9","ssdeep":"","tlshash":"bd21a980485b6500d7836cca22ce3f23de1e9991b405b7296efd24dc9cafc154362b0e","first_seen":"2026-07-22T14:58:07.452056Z","last_seen":"2026-07-22T14:58:07.452056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1232,"timings":{"blocked":972,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.068Z","timestamp":1784732250068,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:48:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c92-4ac6\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19142,"size_decoded":5999,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19142), with no line terminators","md5":"d738599b30619b26ddc19464a0f6156e","sha1":"2e813296bb33f9c1f747182f92a8ff8b042a9af2","sha256":"187bf1772cbc12081afadc162a9c9a463cd710c8a023b8bfb519351770ac5c10","sha512":"17ff9a928e5baeedc39ae4e8d036ff63cca674ace32b6f21669310ee691c143982ca3e3bd33f12d0282ddac4fe4213ccd46c99cf08e22ecf9e6ccbc7e575a163","ssdeep":"384:FsCB6KboRzQcvBEx6vqD68/IfE4AoCifSM2JemNUaF6rrDW5evnmc4VDgGMNgGDa:FsCB6KboRzz20qD68/IfE4AoCifSM2JJ","tlshash":"e2829455b25130a201ff64ab539f621f72b3287ad6074020b1b7427b4ffdd8535aaf2a","first_seen":"2025-03-28T12:13:51.977362Z","last_seen":"2026-07-22T14:58:07.452964Z","times_seen":1298,"resource_available":true,"data":null}},"time_used":2893,"timings":{"blocked":2631,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/2.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.078Z","timestamp":1784732250078,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/2.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:34 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1a-517d\"\r\nExpires: Fri, 21 Aug 2026 14:57:36 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20861,"size_decoded":21052,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"15298cf48ccbf85358f6fa0a2abf5da6","sha1":"1891ba0021691fbf8cdb9f72ec13beb2dbbe5feb","sha256":"bf10800d92abb1fd90bd2339aa751a77cc441a270a1509f04dd67fe79c1315e5","sha512":"77dc0ad18c8024eccfe23c9575e1373381a813ea0bcdd6f3de4a0b7939ffc628d75754c42eb065462f47bb27737ce0fee727bda26efa265557b6897c92928d61","ssdeep":"384:EnsKxhSJssUeI1P2owNLPu3ei/TZxsFb0OK8qPCPmmRyar+OBwttShXxlVyqniyu:EnFSs9eMfwNLWN/T3s6OKBCC5tShhjyX","tlshash":"5d92c0dff94b1656cc10fd07999819a20fe23e80a7acfe7730a7872d4520e3902b8712","first_seen":"2026-07-22T14:58:07.453463Z","last_seen":"2026-07-22T14:58:07.453463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6701,"timings":{"blocked":6440,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kekiusmaximusa.vip/wp-includes/js/wp-emoji-release.min.js?ver=6.7.2","fqdn":"kekiusmaximusa.vip","domain":"kekiusmaximusa.vip","tld":"vip"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.959Z","timestamp":1784732253959,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7.2 HTTP/1.1\r\nHost: kekiusmaximusa.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T18:24:27.697275Z","times_seen":17457126,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/Untitled-design-3.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.973Z","timestamp":1784732253973,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/Untitled-design-3.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:47:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c38-4e0af\"\r\nExpires: Fri, 21 Aug 2026 14:57:37 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319663,"size_decoded":316922,"mime_type":"image/png","magic":"PNG image data, 600 x 900, 8-bit/color RGBA, non-interlaced","md5":"cf4f18afca27364e738a18120fa7fc95","sha1":"180587dd33ba15047497e97029f919b00d5fe0aa","sha256":"399d6b3f974403682e0637a6d3c807ae5ddcde6611083aa9773fb03fbbd8226e","sha512":"b919696351c1ebb4281de1cda70d36805490abca8ce6c9287d52eae9de1770cdaad0825522b3878339ecfa6673ca701b2b83a13556739851855e5376b37b6f56","ssdeep":"6144:qcTJsSQudZIHf6E+Ho0uhjNI21KbQTwEFfYhffvjIFaatgaWXUoifVz/5TR0Eyq:qcTJ9/dZIHf6Lo0wxIx0TwEbI1rkZfdR","tlshash":"8364225c3edb327cd1999131da9ba27e276c99f0e4047f023073be966346995c3ada03","first_seen":"2026-07-22T14:58:07.439238Z","last_seen":"2026-07-22T14:58:07.439238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4358,"timings":{"blocked":3313,"dns":0,"connect":0,"send":0,"wait":261,"receive":784,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.017Z","timestamp":1784732250017,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:48:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c8e-709c5\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461253,"size_decoded":53068,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"75433f1846ca9ae5f94be8f125b99288","sha1":"67b1eb3c321f197213bc188c8891ee71c385bbb6","sha256":"438cd692d5a9985845407af6a988dfef631acc1478ebc870cabdc8bb8502ac19","sha512":"b98343d6625a5b19c1f738da32140d3dbd35c5c811c28c69e247bc86e58f29b4620d05a9a52952232fe3d8c49ea0033311499db841964d0a08000056420d33db","ssdeep":"3072:TLBeqgEwwW0YTxfOVfjhWpGphoGguTfefr:TLBewwwW0Y9fOVfjhWpGphoGgyfefr","tlshash":"52a464566c523208513f8e1f93dd9a5c1728c193e0a30ddeb6c26c1bc75aebd72ea607","first_seen":"2025-03-28T12:13:51.897989Z","last_seen":"2026-07-22T14:58:07.454499Z","times_seen":345,"resource_available":false,"data":null}},"time_used":2647,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":527,"receive":1601,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js?ver=3.1.6","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.036Z","timestamp":1784732250036,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/happy-elementor-addons/assets/vendor/dom-purify/purify.min.js?ver=3.1.6 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c63-53f8\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21496,"size_decoded":8760,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21268)","md5":"fd4f07a2e5108be01d13a4f579ae5e55","sha1":"577622c109b6fc8a27f50d43aaf4820eae02d6d9","sha256":"c0845096a7c4a6741f362ac506c94c1c7d27dc603bcc1bf64a587f76f2dbe3a1","sha512":"8c1d1391305e402f594a406a0e17667d3bf5a9d7db5a9184ef6c89ff4d52aeaea1133648cf6c64cf57b9ee9f5a8bb21e1ccc041bb1e9cc6e8d769b428627f93e","ssdeep":"384:JmG3NaPDRFJoKGv8glM9EI2tJ7BoLoNCkQ0ecGvbEoO/FpurcTWcDXjoA+sfRdu4:lY1grv8cM9EttJ7SLoNCkQ0ecGvbNO/P","tlshash":"1fa23a5a7d2079b65fda01d920bb490d61bc101f300c84a0e7deedb454bbe9a6067f2f","first_seen":"2024-08-03T14:39:56Z","last_seen":"2026-07-22T14:58:07.455043Z","times_seen":2320,"resource_available":true,"data":null}},"time_used":1493,"timings":{"blocked":1232,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/KEKI-e1743692480116-Photoroom-1-1024x363.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.037Z","timestamp":1784732250037,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/KEKI-e1743692480116-Photoroom-1-1024x363.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c26-180c6\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98502,"size_decoded":96670,"mime_type":"image/png","magic":"PNG image data, 1024 x 363, 8-bit/color RGBA, non-interlaced","md5":"d5b6200fbf66d4550799fdc3611f928c","sha1":"a8ba4ceea41b808cff5a1844b7d8d297c63c7957","sha256":"89a011060e718fa46c7a14db7abd567fb94a88e2030c02b351206701ae9800cb","sha512":"cba685248cb2e26deacf85ad9d969238efc05eefdef2b2a47da231f457c5510d6d5b4994d8d807ab764dc38f265dfeb2395dd24b6638da294c53b70f2aafe629","ssdeep":"1536:ZXCO4T1kKP0JYCyEhvJXkh+xPftX7IbJy61DpdhbOL5IxAdYpiCswlApqhBQhRXB:ZKpoJzd9xe+vcUwPOFICYpI7pqjQhRXB","tlshash":"c4a301aa07d1e3ad11c4162d4b2f523fab4ab6ffa7ce08100a6621d0167d995ed3dc3c","first_seen":"2026-07-22T14:58:07.455586Z","last_seen":"2026-07-22T14:58:07.455586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6837,"timings":{"blocked":3398,"dns":0,"connect":0,"send":0,"wait":264,"receive":3175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.4.8","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.046Z","timestamp":1784732250046,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.4.8 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:31 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:48:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c94-21932\"\r\nExpires: Thu, 23 Jul 2026 02:57:31 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137522,"size_decoded":42442,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45047)","md5":"225fdb497713aa2e7838def6690d35e0","sha1":"10ba9e3f215e85655994aef34d927a752172a06b","sha256":"b0fd8dc60a1f1956fec3bf36386f19d3364a86451bf93af9ef1b483dd8fb5b8c","sha512":"66c3b0e29c3e579b88b34ec1e49141e94d6ba6234b5531209db3f67a7d89c68409a668a282b75e9738b0913370d61e8e4c2e472e628d5310d65345194e0cdf30","ssdeep":"1536:pN/eY/jfzmsfCQxPmnG4RaviizVk3PKhDlr79+16rQsA+VvsvGNW5BUWQdQh6Pm7:pN/eY/zzf7Pmnha9ksZ/06Pmn9nfXJ","tlshash":"cdd3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","first_seen":"2025-01-07T20:41:30.666072Z","last_seen":"2026-07-22T14:58:07.456575Z","times_seen":3186,"resource_available":true,"data":null}},"time_used":2005,"timings":{"blocked":1482,"dns":0,"connect":0,"send":0,"wait":263,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.052Z","timestamp":1784732250052,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.14.0 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c44-15b9\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5561,"size_decoded":2914,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5517)","md5":"76984ac942acae1ac3f69ed24b78a4f4","sha1":"7f7712acc6d8a255744dc9c0fc258a47686826e1","sha256":"ca48231e7c3c0b237483aeb5e607a4a0d35a269cca54c10e4d7accf7754a3629","sha512":"8cf94efaa4f67119de44cb1f9c51fa6437fcdfe059a175d647549bc23288ca26a90836af8e158370e39008940f2be21a2d3e4ac597ef2d85e985d34c62bf9e52","ssdeep":"96:B7GhUqdL5LSkqmBVVWDEpre1NHronx4SwQslLoGVmLUVGOremLR6irQ0B78k2:OUgL5LS4BKCr3nCGtGoQHLVDYk2","tlshash":"83b165d506949d1b25e439d8b1576b701a3ed0333c199a81fa22eddc19f8fc187ea933","first_seen":"2023-06-20T00:21:31Z","last_seen":"2026-07-22T14:58:07.457081Z","times_seen":339,"resource_available":true,"data":null}},"time_used":2259,"timings":{"blocked":1999,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.057Z","timestamp":1784732250057,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:46:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c20-12a8\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4776,"size_decoded":2042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-07-22T17:30:47.292005Z","times_seen":229297,"resource_available":true,"data":null}},"time_used":2520,"timings":{"blocked":2259,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/TEXT-1024x95.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.072Z","timestamp":1784732250072,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/TEXT-1024x95.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c33-264ba\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156858,"size_decoded":157070,"mime_type":"image/png","magic":"PNG image data, 880 x 181, 8-bit/color RGBA, non-interlaced","md5":"7e7ae17f3287555ba79f13e28b891dfb","sha1":"48c5658e92440a19dec3e1986a39306b8c1af422","sha256":"d59ed057369c0851719059e28b6f2204e322701f086c28b110600aedff79c903","sha512":"5434c59caa2d06e0841e3256dbdcf35fd5f9154d54b4b93ccedf1a2f0b96821d0593bb5f79da78e955f31cd34b0a43a0516f7f70aeef42ca35c7d18a9f0df639","ssdeep":"3072:kZeisFgT9F0gH1+6gwXBQEgnO4l6+ZWk+AjC1tHdTZkShNECHJe2ikpgi42kqwKd:k8isiAnGQ2c6b+jCb9TZkShNLHw2ik6U","tlshash":"26e312b5814f2708e90a25ee03476238c14d96ffb974912e2cfd8237b2b77727d60a64","first_seen":"2026-07-22T14:58:07.45808Z","last_seen":"2026-07-22T14:58:07.45808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6008,"timings":{"blocked":3383,"dns":0,"connect":0,"send":0,"wait":261,"receive":2364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/184341666_21ddf391-9099-4725-afb1-6ec6758e0374-scaled.jpg","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.533Z","timestamp":1784732253533,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/184341666_21ddf391-9099-4725-afb1-6ec6758e0374-scaled.jpg HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/css/post-32.css?ver=1743761232\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 11:46:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c23-1a18\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6680,"size_decoded":629,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1116, components 3","md5":"d09a59fc304726b8a975681aee49cdd3","sha1":"7b168cb7c7f0b4e33f37edaba6b4f8cb8be6b119","sha256":"43d79d9bcc488b17473ae086ff409a27dba043366f167ecf820526338da518bd","sha512":"7637fb3a883925c1315f62b71a3d003a124e1b3c52aa32bb9b10a983b1a7fd8be7a6a6d07b26e3bd574ad983bc11bd94c7965466806be49709c706034e7572d4","ssdeep":"12:Dl2X3cl2X32gNER//skHY/skm1ltm3kfEdvO8:DljlTaEhsk4skm1Ok4","tlshash":"79d1278937dc5602f563557a13540730bf16dd03435013483a4f7904bdfd2f874404c6","first_seen":"2026-07-22T14:58:07.459185Z","last_seen":"2026-07-22T14:58:07.459185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/css/post-6.css?ver=1743690589","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:29.996Z","timestamp":1784732249996,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1743690589 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3b-4c9\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1225,"size_decoded":787,"mime_type":"text/css","magic":"ASCII text, with very long lines (1225), with no line terminators","md5":"f82dfaebd43ef60f57f2110f0af140a5","sha1":"6c0b7595c97f229e2ec5ae15fc102288d2b9e1ce","sha256":"394602839e937d721ef291fa8e10608b9de3f57ba2f014776c5b6aebb0dd3d43","sha512":"ff23eb396f38a5363cab811099c4b5057303690fcba4aba07990cbee52c2b8077e5e8449450c7236a043dc564bc312047e84528d6b7ffa74916a393022e50a77","ssdeep":"","tlshash":"a92136457a23d032e07b092f91c3b42c112cd45fa25fcadff41d9649f9bea4a2228643","first_seen":"2025-06-05T14:28:25.679911Z","last_seen":"2026-07-22T14:58:07.460017Z","times_seen":23,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.28.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.011Z","timestamp":1784732250011,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.28.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nContent-Length: 600\r\nLast-Modified: Tue, 21 Jul 2026 11:47:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c3e-258\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":945,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"9e595d40f6d8a2175d3048e416323ef2","sha1":"b3fca9cf0fea5244fe32a2b7e672c3c20148b44d","sha256":"7bad7255ed457909728039d3f74cca751190d68953873454a4df0ee33751b545","sha512":"024c54df670f73b5d8011bf1450f3fc5870c983b25456797961c7f07bdb4365b36635f2d3971e301c754a2c2411b28622d474688be6055f935977507edc73a91","ssdeep":"","tlshash":"53f019237d4b9469783f19571183377c74944ec893a0a4d8edfa91436df4cb67370611","first_seen":"2025-04-07T06:02:40.075969Z","last_seen":"2026-07-22T14:58:07.461039Z","times_seen":2651,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":482,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/photo_2025-04-03-15.41.05-Photoroom-1.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.977Z","timestamp":1784732253977,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/photo_2025-04-03-15.41.05-Photoroom-1.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:37 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c27-377a0\"\r\nExpires: Fri, 21 Aug 2026 14:57:37 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227232,"size_decoded":221146,"mime_type":"image/png","magic":"PNG image data, 750 x 1080, 8-bit/color RGBA, non-interlaced","md5":"2de1be81f8eacbac0d4ed8a67fde2b48","sha1":"08df7d64fd1a20b7d1ee6afcbde1455a327a385e","sha256":"727d9a50422b9e19d5cff5cd6e01831d01e3dbf265cd5479920088cce095489b","sha512":"010493f925b32b7aa25eb79d91ad8122bb4108ec3bd8562dc0c4aa1a8e392e7cbe57bac0f0a863cdef4d2b79f7b3ce4a66ab5b8eacf64981ef83579d11e6c72a","ssdeep":"6144:6n+tZU/aeB6OIx7L/Dvo27BKCHlLXVUq+3bUog9Ou1eshT2:6nUZU/aM6pxv82NhTUqyu11h6","tlshash":"9924026c9f72e7b0190fd23bc4f0dbae5e5290250ad01b5e730844ae9b4edb2f679158","first_seen":"2026-07-22T14:58:07.461438Z","last_seen":"2026-07-22T14:58:07.461438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7112,"timings":{"blocked":3703,"dns":0,"connect":0,"send":0,"wait":266,"receive":3143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.14.0","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:29.998Z","timestamp":1784732249998,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.14.0 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:30 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 21 Jul 2026 11:47:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c42-6d562\"\r\nExpires: Thu, 23 Jul 2026 02:57:30 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447842,"size_decoded":43282,"mime_type":"text/css","magic":"ASCII text, with very long lines (65492)","md5":"482c7973712901e37b7f66272f4fe0bc","sha1":"7bc2f327a0f9283ee5a254ceebb31e5bc5116778","sha256":"3e6c5513af1518f59e9c28183dbf095fd3ce2d8e30a7cae3dcda961465fdb1b8","sha512":"d8edda9b7457709e3a1754200dc6d360afffa551f0b0fd02dc9da33fc2752605d261128f54636809f16fb2db668df0a913d7cf3ef17bca4e572724c0799c9106","ssdeep":"6144:5XDtPqrSS1XJPY2YaPIbszGjYhRRoK/0qP1N:5XDtPqrS+oK/0qr","tlshash":"929441a3bc23592432ef602f544365cc395095d8e6435ae8fca26a0f4afadf5733162d","first_seen":"2023-06-20T12:17:54Z","last_seen":"2026-07-22T14:58:07.462511Z","times_seen":120,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":263,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/photo_2025-04-03_15.36.56-removebg-preview-1-1024x1018.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.070Z","timestamp":1784732250070,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/photo_2025-04-03_15.36.56-removebg-preview-1-1024x1018.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:57 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c31-c0334\"\r\nExpires: Fri, 21 Aug 2026 14:57:36 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787252,"size_decoded":787793,"mime_type":"image/png","magic":"PNG image data, 1024 x 1018, 8-bit/color RGBA, non-interlaced","md5":"e6934d06862617c0b255d48194b04b6c","sha1":"ffad0527279472e80309e972c8e32dd79feba3b3","sha256":"3f3bf8789d39626a95a4f72b76392fb936c8d783de5f061545afc1fbb5d85ca8","sha512":"f916baa1eda6144ec606f68848d30f2b3e57cdf19565b9ce1d33d1fd137699372e5fc137ccba36b0e7f52bab6b1e4f291170fa5a38481438ebe88fdd2412fefc","ssdeep":"12288:aytBB//ojDzcPob4lP1eadtC8sTS757nt88w9RwGEKGO8O0jM6IaXK8kBnL+NA6T:t9cDQwb4lN3LC8dxnKGOijkaXK8oSoe","tlshash":"def423e49cb166dcb2142c7e938acf7189447dc7a8c6eee2876da120f507993ff04469","first_seen":"2026-07-22T14:58:07.463038Z","last_seen":"2026-07-22T14:58:07.463038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9386,"timings":{"blocked":6008,"dns":0,"connect":0,"send":0,"wait":261,"receive":3117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/6.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.073Z","timestamp":1784732250073,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/6.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1c-2c64\"\r\nExpires: Fri, 21 Aug 2026 14:57:33 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11364,"size_decoded":11520,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"ff31a1722af51f50000a69b253fa2892","sha1":"98141919396b4b16c783817dbfd8a08930e12c80","sha256":"894b18744f5d62d81879512105b6a8e517bbcf8e7e69c9eddbd7bb55e98debdc","sha512":"49879dd17adbd66129f42a58eeb98a0bf97a8da8d148227d7f9ba69b60edbeb6882fac5476fb2c5197950a53b39578f834376218baa8c3010316ed35e2a115bc","ssdeep":"192:llbTFzHLS6st0UhWBRcWekzB4CRVt0JjUixQrCG0uaOIr1dY4bdDjXo/fgM:lVZ6t0UhWpFN0JNjP91dYodA/f5","tlshash":"5432cf57d9c18e8588c0b7e049f7c1998e0d1900e498b4be5c6a904babd5bf2ce366cf","first_seen":"2025-11-22T02:11:37.536087Z","last_seen":"2026-07-22T14:58:07.464081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3646,"timings":{"blocked":3383,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/img/3.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.079Z","timestamp":1784732250079,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /img/3.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:36 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 Jul 2026 11:46:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c1b-290c\"\r\nExpires: Fri, 21 Aug 2026 14:57:36 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10508,"size_decoded":10664,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced","md5":"b5257a2c7bba0483bdb2228ef1393a8f","sha1":"128074b75f9c12159992cbbaf84a37d41af85eeb","sha256":"02555bde1cb9572e199b92e8dc08625ff82be5b70ff57565f50ea876db6c380b","sha512":"4ba768c1816ddc8692fe25497246e3bdc2e4fa9db727f6c0eab312db4d018591809068c8ac8b237a2a6ad47eaf2ca484e7615a73e4c046f84d390f45b7de3ad9","ssdeep":"192:gRuAQkxSEGHCpl3Xuaf/sBQZRM6otkGi9apuhFed9S2fP1+6uxC:gY1VCbHXsBQZSShYuhF2NfP/","tlshash":"3c22b0a64c792c439244b988a4d2e26fdf3f44c7caae844102df6970c7a4765fd2d8db","first_seen":"2025-11-22T02:11:37.527079Z","last_seen":"2026-07-22T14:58:07.468747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6963,"timings":{"blocked":6701,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:33.603Z","timestamp":1784732253603,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743690639\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:35 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40128\r\nLast-Modified: Tue, 21 Jul 2026 11:47:42 GMT\r\nConnection: keep-alive\r\nETag: \"6a5f5c5e-9cc0\"\r\nStrict-Transport-Security: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":40408,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-22T18:21:50.532498Z","times_seen":940918,"resource_available":false,"data":null}},"time_used":2127,"timings":{"blocked":1853,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:30.063Z","timestamp":1784732250063,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 21 Jul 2026 11:47:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f5c3c-53d8\"\r\nExpires: Thu, 23 Jul 2026 02:57:32 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21464,"size_decoded":7518,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"8fbc22c79d40119dde9a5d16897002b9","sha1":"e9837519aca724457792e2d5ee98a97a0367cdf9","sha256":"7e84c9f8d71bc6eb2dac2fce59a6caea62da51ffa8cf56b41806f59386ab1322","sha512":"3118a198a3710c839c15d6c4b5dc9f9adcd637913af2e26f438b01c80b27281f4937e25aad2817855d8b3eb36207c61ae16d62b17e698799c5316e86f52ac6fc","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv","tlshash":"81a2d94eb246380586f7a2a5402f521fb132e25cb10588ddf468d8da3c7eea95173f79","first_seen":"2024-07-16T20:15:04Z","last_seen":"2026-07-22T17:20:24.034911Z","times_seen":41576,"resource_available":true,"data":null}},"time_used":2779,"timings":{"blocked":2518,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"robinhoodaiagent.xyz/wp-content/uploads/2025/04/cropped-photo_2025-04-03_15.36.56-removebg-preview-1-192x192.png","fqdn":"robinhoodaiagent.xyz","domain":"robinhoodaiagent.xyz","tld":"xyz"},"ip":{"addr":"43.154.85.242","port":80,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://robinhoodaiagent.xyz/","date":"2026-07-22T14:57:38.305Z","timestamp":1784732258305,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/04/cropped-photo_2025-04-03_15.36.56-removebg-preview-1-192x192.png HTTP/1.1\r\nHost: robinhoodaiagent.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://robinhoodaiagent.xyz/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 22 Jul 2026 14:57:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":294,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-22T18:24:51.84868Z","times_seen":542897,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-22","alert":"Phishing Block","trigger":"robinhoodaiagent.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"robinhoodaiagent.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}