{"report_id":"14aa53d6-87f2-42f3-a882-597faef3ddb4","version":6,"status":"done","tags":[],"date":"2026-02-13T22:31:46Z","url":{"schema":"https","addr":"cashflowapp.click/","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"title":"","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cashflowapp.click/","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T22:31:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"cashflowapp.click/assets/index-BYwoJzll.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"files.manuscdn.com","ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":1414307,"first_seen":"2025-03-12T08:00:03.578177Z","last_seen":"2026-02-09T10:39:52.963783Z","alert_count":0,"request_count":5,"received_data":3680950,"sent_data":2275,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api.manus.im","ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":485297,"first_seen":"2025-03-12T08:00:03.587143Z","last_seen":"2026-02-10T10:07:36.920227Z","alert_count":0,"request_count":5,"received_data":980,"sent_data":2475,"comment":"","tags":null,"fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":5,"received_data":53890,"sent_data":2380,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"private-us-east-1.manuscdn.com","ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":1714368,"first_seen":"2025-04-17T20:35:54.702452Z","last_seen":"2026-02-13T09:40:31.234002Z","alert_count":0,"request_count":10,"received_data":3910,"sent_data":14740,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cashflowapp.click","ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-19","domain_rank":0,"first_seen":"2026-02-13T22:32:18.827054Z","last_seen":"2026-02-13T22:32:18.827054Z","alert_count":25,"request_count":25,"received_data":42405927,"sent_data":12329,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"manus-analytics.com","ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-19T13:04:57.49856Z","last_seen":"2026-02-13T04:14:13.310228Z","alert_count":0,"request_count":13,"received_data":26818,"sent_data":6231,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-08T23:22:23.903795Z","alert_count":5,"request_count":5,"received_data":11404825,"sent_data":2405,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"plausible.io","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-12-30","domain_rank":8565,"first_seen":"2019-02-01T08:53:03Z","last_seen":"2026-02-09T08:01:19.835059Z","alert_count":0,"request_count":17,"received_data":38596,"sent_data":8326,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04922dc466f5064568485143fa28245a","sha1":"014a2847682b000a8278fe7384c469d5bb814969","sha256":"1288fa5ce0e4145f3b05569b68ac77f24afbb02d030a0bf497437709db138daf","sha512":"932250bd757f0d63f48245f2ce2b22c8cb692eb9556918e15cc331b4d6971744d34beca7b6b97c601fe41242aea40fd0a61a86117efce91f0c474fd19fdba142","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt0:DrnxPOvyJZYLM","tlshash":"aa748e98327925796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","size":366792,"data":"","first_seen":"2025-12-17T21:55:23.967437Z","last_seen":"2026-06-07T03:56:12.242412Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e7bbb4d0d7f66dc4b14c64d54154455","sha1":"432dfecf28af9fd1e62c7ab31f6e44186c0f3d2a","sha256":"d1d852383403f39a26a7b8121808e39ce7e90774c6a61e41663a6fe612c834aa","sha512":"f6d74756aac05e3bb190c49aedcadba5ac5a4fac66a70c617592947e229332d5ecee44bc271d6a8a463541b690cdf17913dc2f5b42b7516d8be89419ca2b3e93","ssdeep":"","tlshash":"a0e068d3430c81ed41a0c248acaf38c8fe0ecc4a2e9b9a22dcb5a90450ea032d0a2174","size":385,"data":"","first_seen":"2026-02-13T13:39:42.488356Z","last_seen":"2026-02-13T22:32:28.918734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6eabd2c8a5542b33638416c0e5813a","sha1":"cec07bbc9fc6093a60433337c6c490cf5e1f29aa","sha256":"b01f7032c5187aef92117b96bc86f754f686a284e6e2a00325fbae153c4cc4c4","sha512":"34b8184deaea010fdc5cc254bf4bb33d009804fe12365ae515a470040ef73ea1b91f5eb6dcdc32b7340d01bcf836e61e43ef1194fbc6717183cd443628fbb334","ssdeep":"98304:ufgJOuUArdA8XISTT7agQYqQwXEMxunSS:uoQuUArdA8XTTT7agQYq7N2SS","tlshash":"76868ca972913429839351e0507f040bf23d68a9a84cc45cf369d8ea6dfcd4aa17bf7d","size":7908047,"data":"","first_seen":"2026-02-13T13:39:42.494128Z","last_seen":"2026-02-13T22:32:28.923415Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"cashflowapp.click/assets/index-BYwoJzll.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97247d1a8e9d91cafde0cce7c823b382","sha1":"a7a54c71957545771fd45025084f406c152778c3","sha256":"0291902ff79f5d72058f0ecf27a6261b3c5e757cb12b4f5fe8874e24deefb30d","sha512":"0e0af62f9247d36eb5f13ee0d56997e5404410c896a407cf26c1091fa60cc0d871104162287c132bbd6c53b27cedbba3871d9f46fece018f5060d7635a8db868","ssdeep":"","tlshash":"e0d0a9e4a38cb32d12bc30848b2f334b702e042a19442a933905d257b428f8f8b34ef8","size":241,"data":"","first_seen":"2025-06-01T08:22:11.798063Z","last_seen":"2026-06-01T18:37:29.561286Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04922dc466f5064568485143fa28245a","sha1":"014a2847682b000a8278fe7384c469d5bb814969","sha256":"1288fa5ce0e4145f3b05569b68ac77f24afbb02d030a0bf497437709db138daf","sha512":"932250bd757f0d63f48245f2ce2b22c8cb692eb9556918e15cc331b4d6971744d34beca7b6b97c601fe41242aea40fd0a61a86117efce91f0c474fd19fdba142","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt0:DrnxPOvyJZYLM","tlshash":"aa748e98327925796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","size":366792,"data":"","first_seen":"2025-12-17T21:55:23.967437Z","last_seen":"2026-06-07T03:56:12.242412Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b5001d5d3acb206b5d461c3828d52d2","sha1":"fe5fbc267013b5411d463e26ae0b52416da7de93","sha256":"259dd5047865b71d9416f047177d785e7bc0dcb4d582d5a276a058cdbeba5e62","sha512":"0288a30e77fe0a4c27815df01a62d5257cc559f53f089e6af5b176ed412ae40f18ec8f00bd03c08cbe3061c957242cb19f795c58be9aadb14f602b1bf1bfae41","ssdeep":"49152:soxrhOM3KIOwPHhW7MHeATLHKwSnVhdpH/FkaBGosHeX/6wA4CNqy2F3simsssXG:cMH0hdpH9kaBho","tlshash":"7db57dd533657027879b909950ba0542b33a74d61809482cba2cdceb7ba8c4972ffff5","size":2280095,"data":"","first_seen":"2026-01-27T00:41:22.287055Z","last_seen":"2026-05-05T12:40:50.183324Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6eabd2c8a5542b33638416c0e5813a","sha1":"cec07bbc9fc6093a60433337c6c490cf5e1f29aa","sha256":"b01f7032c5187aef92117b96bc86f754f686a284e6e2a00325fbae153c4cc4c4","sha512":"34b8184deaea010fdc5cc254bf4bb33d009804fe12365ae515a470040ef73ea1b91f5eb6dcdc32b7340d01bcf836e61e43ef1194fbc6717183cd443628fbb334","ssdeep":"98304:ufgJOuUArdA8XISTT7agQYqQwXEMxunSS:uoQuUArdA8XTTT7agQYq7N2SS","tlshash":"76868ca972913429839351e0507f040bf23d68a9a84cc45cf369d8ea6dfcd4aa17bf7d","size":7908047,"data":"","first_seen":"2026-02-13T13:39:42.494128Z","last_seen":"2026-02-13T22:32:28.923415Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"cashflowapp.click/assets/index-BYwoJzll.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b5001d5d3acb206b5d461c3828d52d2","sha1":"fe5fbc267013b5411d463e26ae0b52416da7de93","sha256":"259dd5047865b71d9416f047177d785e7bc0dcb4d582d5a276a058cdbeba5e62","sha512":"0288a30e77fe0a4c27815df01a62d5257cc559f53f089e6af5b176ed412ae40f18ec8f00bd03c08cbe3061c957242cb19f795c58be9aadb14f602b1bf1bfae41","ssdeep":"49152:soxrhOM3KIOwPHhW7MHeATLHKwSnVhdpH/FkaBGosHeX/6wA4CNqy2F3simsssXG:cMH0hdpH9kaBho","tlshash":"7db57dd533657027879b909950ba0542b33a74d61809482cba2cdceb7ba8c4972ffff5","size":2280095,"data":"","first_seen":"2026-01-27T00:41:22.287055Z","last_seen":"2026-05-05T12:40:50.183324Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e7bbb4d0d7f66dc4b14c64d54154455","sha1":"432dfecf28af9fd1e62c7ab31f6e44186c0f3d2a","sha256":"d1d852383403f39a26a7b8121808e39ce7e90774c6a61e41663a6fe612c834aa","sha512":"f6d74756aac05e3bb190c49aedcadba5ac5a4fac66a70c617592947e229332d5ecee44bc271d6a8a463541b690cdf17913dc2f5b42b7516d8be89419ca2b3e93","ssdeep":"","tlshash":"a0e068d3430c81ed41a0c248acaf38c8fe0ecc4a2e9b9a22dcb5a90450ea032d0a2174","size":385,"data":"","first_seen":"2026-02-13T13:39:42.488356Z","last_seen":"2026-02-13T22:32:28.918734Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6eabd2c8a5542b33638416c0e5813a","sha1":"cec07bbc9fc6093a60433337c6c490cf5e1f29aa","sha256":"b01f7032c5187aef92117b96bc86f754f686a284e6e2a00325fbae153c4cc4c4","sha512":"34b8184deaea010fdc5cc254bf4bb33d009804fe12365ae515a470040ef73ea1b91f5eb6dcdc32b7340d01bcf836e61e43ef1194fbc6717183cd443628fbb334","ssdeep":"98304:ufgJOuUArdA8XISTT7agQYqQwXEMxunSS:uoQuUArdA8XTTT7agQYq7N2SS","tlshash":"76868ca972913429839351e0507f040bf23d68a9a84cc45cf369d8ea6dfcd4aa17bf7d","size":7908047,"data":"","first_seen":"2026-02-13T13:39:42.494128Z","last_seen":"2026-02-13T22:32:28.923415Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"cashflowapp.click/assets/index-BYwoJzll.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97247d1a8e9d91cafde0cce7c823b382","sha1":"a7a54c71957545771fd45025084f406c152778c3","sha256":"0291902ff79f5d72058f0ecf27a6261b3c5e757cb12b4f5fe8874e24deefb30d","sha512":"0e0af62f9247d36eb5f13ee0d56997e5404410c896a407cf26c1091fa60cc0d871104162287c132bbd6c53b27cedbba3871d9f46fece018f5060d7635a8db868","ssdeep":"","tlshash":"e0d0a9e4a38cb32d12bc30848b2f334b702e042a19442a933905d257b428f8f8b34ef8","size":241,"data":"","first_seen":"2025-06-01T08:22:11.798063Z","last_seen":"2026-06-01T18:37:29.561286Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6eabd2c8a5542b33638416c0e5813a","sha1":"cec07bbc9fc6093a60433337c6c490cf5e1f29aa","sha256":"b01f7032c5187aef92117b96bc86f754f686a284e6e2a00325fbae153c4cc4c4","sha512":"34b8184deaea010fdc5cc254bf4bb33d009804fe12365ae515a470040ef73ea1b91f5eb6dcdc32b7340d01bcf836e61e43ef1194fbc6717183cd443628fbb334","ssdeep":"98304:ufgJOuUArdA8XISTT7agQYqQwXEMxunSS:uoQuUArdA8XTTT7agQYq7N2SS","tlshash":"76868ca972913429839351e0507f040bf23d68a9a84cc45cf369d8ea6dfcd4aa17bf7d","size":7908047,"data":"","first_seen":"2026-02-13T13:39:42.494128Z","last_seen":"2026-02-13T22:32:28.923415Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"cashflowapp.click/assets/index-BYwoJzll.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b5001d5d3acb206b5d461c3828d52d2","sha1":"fe5fbc267013b5411d463e26ae0b52416da7de93","sha256":"259dd5047865b71d9416f047177d785e7bc0dcb4d582d5a276a058cdbeba5e62","sha512":"0288a30e77fe0a4c27815df01a62d5257cc559f53f089e6af5b176ed412ae40f18ec8f00bd03c08cbe3061c957242cb19f795c58be9aadb14f602b1bf1bfae41","ssdeep":"49152:soxrhOM3KIOwPHhW7MHeATLHKwSnVhdpH/FkaBGosHeX/6wA4CNqy2F3simsssXG:cMH0hdpH9kaBho","tlshash":"7db57dd533657027879b909950ba0542b33a74d61809482cba2cdceb7ba8c4972ffff5","size":2280095,"data":"","first_seen":"2026-01-27T00:41:22.287055Z","last_seen":"2026-05-05T12:40:50.183324Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6eabd2c8a5542b33638416c0e5813a","sha1":"cec07bbc9fc6093a60433337c6c490cf5e1f29aa","sha256":"b01f7032c5187aef92117b96bc86f754f686a284e6e2a00325fbae153c4cc4c4","sha512":"34b8184deaea010fdc5cc254bf4bb33d009804fe12365ae515a470040ef73ea1b91f5eb6dcdc32b7340d01bcf836e61e43ef1194fbc6717183cd443628fbb334","ssdeep":"98304:ufgJOuUArdA8XISTT7agQYqQwXEMxunSS:uoQuUArdA8XTTT7agQYq7N2SS","tlshash":"76868ca972913429839351e0507f040bf23d68a9a84cc45cf369d8ea6dfcd4aa17bf7d","size":7908047,"data":"","first_seen":"2026-02-13T13:39:42.494128Z","last_seen":"2026-02-13T22:32:28.923415Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"cashflowapp.click/assets/index-BYwoJzll.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b5001d5d3acb206b5d461c3828d52d2","sha1":"fe5fbc267013b5411d463e26ae0b52416da7de93","sha256":"259dd5047865b71d9416f047177d785e7bc0dcb4d582d5a276a058cdbeba5e62","sha512":"0288a30e77fe0a4c27815df01a62d5257cc559f53f089e6af5b176ed412ae40f18ec8f00bd03c08cbe3061c957242cb19f795c58be9aadb14f602b1bf1bfae41","ssdeep":"49152:soxrhOM3KIOwPHhW7MHeATLHKwSnVhdpH/FkaBGosHeX/6wA4CNqy2F3simsssXG:cMH0hdpH9kaBho","tlshash":"7db57dd533657027879b909950ba0542b33a74d61809482cba2cdceb7ba8c4972ffff5","size":2280095,"data":"","first_seen":"2026-01-27T00:41:22.287055Z","last_seen":"2026-05-05T12:40:50.183324Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b5001d5d3acb206b5d461c3828d52d2","sha1":"fe5fbc267013b5411d463e26ae0b52416da7de93","sha256":"259dd5047865b71d9416f047177d785e7bc0dcb4d582d5a276a058cdbeba5e62","sha512":"0288a30e77fe0a4c27815df01a62d5257cc559f53f089e6af5b176ed412ae40f18ec8f00bd03c08cbe3061c957242cb19f795c58be9aadb14f602b1bf1bfae41","ssdeep":"49152:soxrhOM3KIOwPHhW7MHeATLHKwSnVhdpH/FkaBGosHeX/6wA4CNqy2F3simsssXG:cMH0hdpH9kaBho","tlshash":"7db57dd533657027879b909950ba0542b33a74d61809482cba2cdceb7ba8c4972ffff5","size":2280095,"data":"","first_seen":"2026-01-27T00:41:22.287055Z","last_seen":"2026-05-05T12:40:50.183324Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCg6TpKbT%2BrPN6QxYHLoGlu5dQF%2BH25TMLcziy9oikvdBqP70uwYyTL%2B0SD0XFnA9R7u9JzWbBqO%2FxYNFb7qrAyL%2BGyH0AEu75%2BLVRRzbLYukYM%3D\"}]}\r\ncf-ray: 9cd7c6441f3c51e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":59,"dns":30,"connect":14,"send":0,"wait":134,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:20.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:20 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: jPmwDy1ei2iMyFTDby9AqS9VKWGTEHUrHfdOX4b21Bf7QTAVSJfRBQ==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:30.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 35\r\nserver: cloudflare\r\ncf-ray: 9cd7c6bdcf5735a6-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: trpc-accept, Accept-Encoding\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"66bbd4885819692adc970633d13ebcc4","sha1":"4b257f0f5fce8e35a9a4bd1efea7d2dfe27b8525","sha256":"6578578485e8b3efa9586df2647cea5d7eb0e7fec6a0ae9be8002f1b86b36556","sha512":"7d20659c1a98395cb3fc5dff298da69a5331da589b2c6c2ace3a7f6d7d485569e65cdbd8518491af239a2993719d5996b257587c1bb66d6aa4f3574dabcb7f00","ssdeep":"","tlshash":"19800088bcc003080e28ce8aec00808283083a2a02288e2a00883a0082c803c3ab8a20","first_seen":"2023-06-03T07:14:51Z","last_seen":"2026-08-06T11:26:01.687293Z","times_seen":362,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-lf1rEL2v.css","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-lf1rEL2v.css HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c65d9d8335a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195982,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f64badf43bef746309fff9bd7829110","sha1":"e1774e9817869c68087ba4664d50d41409d34528","sha256":"3455935ea8c06dbe3fbbd3dc6b3af6bed87160cd7b1c51d435c020df2a29b538","sha512":"264434c835024958525eae5ebd66ba45226cb2285232dbb8f9c33f45f0c44cfb4df7ab94ef4f4f84abff65cc58f70c759df502aca534d3e2183856a6e0b4afb8","ssdeep":"3072:9RbvVBhqtdypbPybKrUHlUzTbSPFAtMq+WDhKAjiT7TK:9LBhqtdQzTOPFAtMq+WDhKAjK7TK","tlshash":"9214d5a0b2b5e53bbc2774fd938ce45c911970c4ed2983eef919a11117c3bf618aba14","first_seen":"2026-02-13T13:39:42.476575Z","last_seen":"2026-02-13T22:32:28.871708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@splinetool/viewer@1.12.39/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cd7c6910ab1a41f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 31969\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 13 Feb 2027 22:31:23 GMT\r\nlast-modified: Wed, 21 Jan 2026 01:59:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:JZ3VBHhltx2UFvBHF314XnvA3LTVgtWidqBYzb66XmI=:\r\nfly-request-id: 01KFF4EDDQY3GC3BTWF3JSTRCD-arn\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2280095,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdebfd837a614db3f1a34e5ba5d26ba7","sha1":"5375719e8a99e16bd34b48db02663212122f7f83","sha256":"ed364e448a04a70a3898e8a1d5f82f5498e84888bee89732e0e39068f10adf17","sha512":"65f5bd6e281d0b1e2b727b4dc448b51c2c83f47eaf8d2eef6a418912f04a18319014bd39701049082cf9113d28b718a60bdafb44e3f21fe7bed32ffc74b92c66","ssdeep":"12288:9KH++FOgb5DT1KR+oxrhOM3KIOwPHhWwnvA4w7hK0RuHeFyzH1YD:90M+oxrhOM3KIOwPHhWMS7MHeAzHo","tlshash":"cb256cd473a5b027875b90e6547b0006f33d7899180d882cf61ce8eb79a485972fbfb9","first_seen":"2026-01-27T00:41:22.219913Z","last_seen":"2026-05-05T12:40:50.114003Z","times_seen":4,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/spline-embed.html","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:26.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /spline-embed.html HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:17.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 155\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{\"domain\":\"cashflowapp.click\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvA5sSbAU3Hw8tAmSN\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:17\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 15bdd366a4107c289933783c249be963\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:21.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 120\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":120,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBJ4DzXgjpPAneuEQ\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:21\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 5a89ce6695e1ea6ea2803b6920562c0a\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:31:22.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c68d0bd135a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":376190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28182)","md5":"a59171d967bdee99b7e296595ee0e826","sha1":"3f19c2cb7479216f7773aa692c3bc07f05784b91","sha256":"22573d9e5742d9d893cd313fa379fefedd15cb07efc3ad8ff480ad5de5c0bf9d","sha512":"5bbff5c4c52d0d71a0bc729f1eb9678ba2052b7d99113f0eedd4f07b7c2338cf99ee7b4bd5f89c5362ce4073642b47b4aa57d2ea558436a84907e589e98c2be4","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt1:DrnxPOvyJZYLN","tlshash":"b1848e98327925796ea302e5a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-13T13:39:42.474313Z","last_seen":"2026-02-13T22:32:28.8772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:17.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:23 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEwv9zpJhEuL58uGZZXlE59Rr4D05DNiZt46ZzzD6A9z25NTOgZHEpsFPlG%2BQY59yeosTxF8RvJOyz3%2F%2BHZGnh8GTKdXzfbDXR5JxYuRytw0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c6911c2682b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:26.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-lf1rEL2v.css","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:27.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-lf1rEL2v.css HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6a9bf4435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195982,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f64badf43bef746309fff9bd7829110","sha1":"e1774e9817869c68087ba4664d50d41409d34528","sha256":"3455935ea8c06dbe3fbbd3dc6b3af6bed87160cd7b1c51d435c020df2a29b538","sha512":"264434c835024958525eae5ebd66ba45226cb2285232dbb8f9c33f45f0c44cfb4df7ab94ef4f4f84abff65cc58f70c759df502aca534d3e2183856a6e0b4afb8","ssdeep":"3072:9RbvVBhqtdypbPybKrUHlUzTbSPFAtMq+WDhKAjiT7TK:9LBhqtdQzTOPFAtMq+WDhKAjK7TK","tlshash":"9214d5a0b2b5e53bbc2774fd938ce45c911970c4ed2983eef919a11117c3bf618aba14","first_seen":"2026-02-13T13:39:42.476575Z","last_seen":"2026-02-13T22:32:28.871708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:29.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 120\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":120,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:29 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBnUFKYSVHAotcDMD\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:29\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 6a8bb3078570dd4ec5f7515431628fdb\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:21.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: application/json\r\nContent-Length: 263\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":263,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8d449432-411b-41a7-9c96-b2ddd94b4014\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"AI-Powered Financial Data Analysis \u0026 Visualization Tool\",\"hostname\":\"cashflowapp.click\",\"url\":\"https://cashflowapp.click/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:22 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rS6viJHLf86GhfWruHIgKacf%2B2ZPWLDLDdXgquF%2B2nSNyp7qzEezTuTJq%2B9NC%2FR548taRGkzKkDNVUblL0no0XZyutyjLadCaZ8EEWd6GxmnPc%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd7c68a0ef40d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9d5009ec58d84f696d2bfe5077b75e34","sha1":"2f7eec1dfa3940b18ccd5c3dee0e864ff9c93fac","sha256":"0be4a7450c21320f8c63e8ed9b356959192fe613fe52b5bd43e1e2c1448ceb86","sha512":"67dca1a296effffe0ec1d9ebd4063f390f7754e615a7f9389949566041ddb785ab5ed3d882dce24eeb86f8d7996db7d1900044bb32efde3f0d2ceb746ff2c03a","ssdeep":"","tlshash":"9ce0f13d544c4ba5a79a2743cc44095c0dcb23b20ff400f5e1ed2c30de7ade31045665","first_seen":"2026-02-13T22:32:28.882698Z","last_seen":"2026-02-13T22:32:28.882698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:26.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: application/json\r\nContent-Length: 263\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":263,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8d449432-411b-41a7-9c96-b2ddd94b4014\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"AI-Powered Financial Data Analysis \u0026 Visualization Tool\",\"hostname\":\"cashflowapp.click\",\"url\":\"https://cashflowapp.click/\",\"referrer\":\"\"}}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:26.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@splinetool/viewer@1.12.39/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cd7c6a9ac34a41f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 31973\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 13 Feb 2027 22:31:27 GMT\r\nlast-modified: Wed, 21 Jan 2026 01:59:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:JZ3VBHhltx2UFvBHF314XnvA3LTVgtWidqBYzb66XmI=:\r\nfly-request-id: 01KFF4EDDQY3GC3BTWF3JSTRCD-arn\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":2280095,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdebfd837a614db3f1a34e5ba5d26ba7","sha1":"5375719e8a99e16bd34b48db02663212122f7f83","sha256":"ed364e448a04a70a3898e8a1d5f82f5498e84888bee89732e0e39068f10adf17","sha512":"65f5bd6e281d0b1e2b727b4dc448b51c2c83f47eaf8d2eef6a418912f04a18319014bd39701049082cf9113d28b718a60bdafb44e3f21fe7bed32ffc74b92c66","ssdeep":"12288:9KH++FOgb5DT1KR+oxrhOM3KIOwPHhWwnvA4w7hK0RuHeFyzH1YD:90M+oxrhOM3KIOwPHhWMS7MHeAzHo","tlshash":"cb256cd473a5b027875b90e6547b0006f33d7899180d882cf61ce8eb79a485972fbfb9","first_seen":"2026-01-27T00:41:22.219913Z","last_seen":"2026-05-05T12:40:50.114003Z","times_seen":4,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:27.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 08:20:46 GMT\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 1fBPXZH4PT4eEiU5DOKZGfKk_pAhrBGOY7dgxkoSD9DHPaX_0Vda4Q==\r\nage: 59654\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:28.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:28 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YSG74nWxiH-SDy8NGYbPrT1XfCRz0zaR8lust-D7KV18OFYXmpOv8A==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:13.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 96\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvArJVBxgv30ctlPOE\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:13\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 0e386d87c007be1b95f1231a11afcc08\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":18,"dns":1,"connect":2,"send":0,"wait":33,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:21.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 155\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{\"domain\":\"cashflowapp.click\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBJ4H8qPjw6YtliME\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:21\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 851289d181a5192ccb752daea5666395\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:25.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 120\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":120,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBYrBxalLwisLCgYW\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:25\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: b3c5a0f2d13a3d50bbfd01e2cad72f6b\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:31:09.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c63cf9dd35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28182)","md5":"a59171d967bdee99b7e296595ee0e826","sha1":"3f19c2cb7479216f7773aa692c3bc07f05784b91","sha256":"22573d9e5742d9d893cd313fa379fefedd15cb07efc3ad8ff480ad5de5c0bf9d","sha512":"5bbff5c4c52d0d71a0bc729f1eb9678ba2052b7d99113f0eedd4f07b7c2338cf99ee7b4bd5f89c5362ce4073642b47b4aa57d2ea558436a84907e589e98c2be4","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt1:DrnxPOvyJZYLN","tlshash":"b1848e98327925796ea302e5a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-13T13:39:42.474313Z","last_seen":"2026-02-13T22:32:28.8772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":78,"dns":59,"connect":1,"send":0,"wait":852,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@splinetool/viewer@1.12.39/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cd7c643bf720731-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 31957\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 13 Feb 2027 22:31:10 GMT\r\nlast-modified: Wed, 21 Jan 2026 01:59:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:JZ3VBHhltx2UFvBHF314XnvA3LTVgtWidqBYzb66XmI=:\r\nfly-request-id: 01KFF4EDDQY3GC3BTWF3JSTRCD-arn\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2280095,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdebfd837a614db3f1a34e5ba5d26ba7","sha1":"5375719e8a99e16bd34b48db02663212122f7f83","sha256":"ed364e448a04a70a3898e8a1d5f82f5498e84888bee89732e0e39068f10adf17","sha512":"65f5bd6e281d0b1e2b727b4dc448b51c2c83f47eaf8d2eef6a418912f04a18319014bd39701049082cf9113d28b718a60bdafb44e3f21fe7bed32ffc74b92c66","ssdeep":"12288:9KH++FOgb5DT1KR+oxrhOM3KIOwPHhWwnvA4w7hK0RuHeFyzH1YD:90M+oxrhOM3KIOwPHhWMS7MHeAzHo","tlshash":"cb256cd473a5b027875b90e6547b0006f33d7899180d882cf61ce8eb79a485972fbfb9","first_seen":"2026-01-27T00:41:22.219913Z","last_seen":"2026-05-05T12:40:50.114003Z","times_seen":4,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":19,"dns":1,"connect":3,"send":0,"wait":37,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:24.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:24 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fuHtval--OGvQg49t_szcBQMd3nnGsW8tX1nTNmYphcujEzw7NW9Tw==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmCkLCdT01Ev5gUU%2BMV3bHo67uTZ%2FL0amAC2fpvMpp98KIkV6sA0r9vWokux1ft4PNS2z1OY%2FhNvl%2FQZvsUaevWdkuVb1lce4LEsW64gp0uI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c6779b9b82b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:18 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 11:48:12\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: f4709fe90cef7dab34aa177e13f6c656\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:16.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:16 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: uJZMj4qD9dm4m3jlUetz5t23OovrqtiL1F7rdjXXGNb_oeB8Inhg1Q==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:14 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmRADZRFc6ckRzSLquQnf22zQqhgER%2FiG2VvDSTqsWk17vh9%2F8o2Eo%2FLwjQV%2FRINInf7h0F17hoCZVOFnchB1tjQUW6z3tpJOqP6nFCPGC1A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c65d9b3682b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:27.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:26 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 11:48:12\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: b0ae2934af377afe812bf6fdd639a411\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:14.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:26.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"n\":\"engagement\",\"sd\":12,\"d\":\"manus.space\",\"u\":\"https://cashflowapp.click/\",\"p\":{},\"e\":1378,\"v\":33,\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBd02dZ2FInUtxjeF\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:26\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 5f7e6d9f7533d77d5d2470dd8fd78be0\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:31:17.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6716ab435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28182)","md5":"a59171d967bdee99b7e296595ee0e826","sha1":"3f19c2cb7479216f7773aa692c3bc07f05784b91","sha256":"22573d9e5742d9d893cd313fa379fefedd15cb07efc3ad8ff480ad5de5c0bf9d","sha512":"5bbff5c4c52d0d71a0bc729f1eb9678ba2052b7d99113f0eedd4f07b7c2338cf99ee7b4bd5f89c5362ce4073642b47b4aa57d2ea558436a84907e589e98c2be4","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt1:DrnxPOvyJZYLN","tlshash":"b1848e98327925796ea302e5a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-13T13:39:42.474313Z","last_seen":"2026-02-13T22:32:28.8772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 08:20:46 GMT\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ChGKR1hIKidD2cV3YW11LaTdiSuZeWkR-B25WuEq7XtRE9iy-O4cDw==\r\nage: 59646\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:24.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:24 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 1Cu06vbddmcUBW-TYXZziQQgZyGYGPlXUayauTddWoMil9UmxkpcfA==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:14 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 11:48:12\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 0a0e43a24b68b5795d3fa7cf2303b089\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:16.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:16 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: VLmr1PmPn7_4tcP1zU2e6Q3scKdcfw7sNpRzKVurdwPvZbVlYmkSPg==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:10 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 11:48:12\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: b9fb72b0827be853cb5da70dbebef7c5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":18,"dns":11,"connect":3,"send":0,"wait":8,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-lf1rEL2v.css","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-lf1rEL2v.css HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6910d4c35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195982,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f64badf43bef746309fff9bd7829110","sha1":"e1774e9817869c68087ba4664d50d41409d34528","sha256":"3455935ea8c06dbe3fbbd3dc6b3af6bed87160cd7b1c51d435c020df2a29b538","sha512":"264434c835024958525eae5ebd66ba45226cb2285232dbb8f9c33f45f0c44cfb4df7ab94ef4f4f84abff65cc58f70c759df502aca534d3e2183856a6e0b4afb8","ssdeep":"3072:9RbvVBhqtdypbPybKrUHlUzTbSPFAtMq+WDhKAjiT7TK:9LBhqtdQzTOPFAtMq+WDhKAjK7TK","tlshash":"9214d5a0b2b5e53bbc2774fd938ce45c911970c4ed2983eef919a11117c3bf618aba14","first_seen":"2026-02-13T13:39:42.476575Z","last_seen":"2026-02-13T22:32:28.871708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 08:20:46 GMT\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: dbJrCig-dI_rDFmjJ3Um-bqwh-yxqNG0q8aNcYni4vW9vdxjv0TsOg==\r\nage: 59651\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@splinetool/viewer@1.12.39/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cd7c65d8bab0731-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 31961\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 13 Feb 2027 22:31:14 GMT\r\nlast-modified: Wed, 21 Jan 2026 01:59:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:JZ3VBHhltx2UFvBHF314XnvA3LTVgtWidqBYzb66XmI=:\r\nfly-request-id: 01KFF4EDDQY3GC3BTWF3JSTRCD-arn\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2280095,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdebfd837a614db3f1a34e5ba5d26ba7","sha1":"5375719e8a99e16bd34b48db02663212122f7f83","sha256":"ed364e448a04a70a3898e8a1d5f82f5498e84888bee89732e0e39068f10adf17","sha512":"65f5bd6e281d0b1e2b727b4dc448b51c2c83f47eaf8d2eef6a418912f04a18319014bd39701049082cf9113d28b718a60bdafb44e3f21fe7bed32ffc74b92c66","ssdeep":"12288:9KH++FOgb5DT1KR+oxrhOM3KIOwPHhWwnvA4w7hK0RuHeFyzH1YD:90M+oxrhOM3KIOwPHhWMS7MHeAzHo","tlshash":"cb256cd473a5b027875b90e6547b0006f33d7899180d882cf61ce8eb79a485972fbfb9","first_seen":"2026-01-27T00:41:22.219913Z","last_seen":"2026-05-05T12:40:50.114003Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:20.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:20 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: mMO07WdBcp3Xf8DKxsMMLJy3dkCYJ2jQdmkoOJx9HqltuQMNR6khrg==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:28.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":430,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:27.879Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:27.879Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:12.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:12 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: IcT-GUSlt9dygL_dFkso2NFqtc6URXDzEK0CDg_cc8pjZiy-xE8zAA==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":8,"connect":3,"send":0,"wait":5,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:12.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_64,h_64/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:12 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 38q7wtiRU-QkSe2P50uZ8qE24LvnqDJ90quIgKglv1wjo4ZEnJ8Dbw==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":1,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:14.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 106\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"n\":\"engagement\",\"sd\":12,\"d\":\"manus.space\",\"u\":\"https://cashflowapp.click/\",\"p\":{},\"e\":1334,\"v\":33,\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvAwD7anttFHIdugiS\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:14\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 76f811ea2b0c13a22d07cda426409c29\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:17.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 120\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":120,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:17 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvA5sG1W4CVb4tt5CJ\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:17\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 61ff38f96227345524cd5140119cce37\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:25.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashflowapp.click/\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 13 Feb 2026 22:31:25 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzxRarvNk6Iuo%2BgOmKWvIubqxpgSoEGNKODGhIrwTw0np4bWbLEciyMaeoe8GnWJWmwOs1Kl0%2FG%2FkoW43SuxuoGrNGiSE%2F0LVDZPDtsWtcxXurA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c6a1e9570d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@splinetool/viewer@1.12.39/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cd7c677887ea41f-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 31965\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 13 Feb 2027 22:31:18 GMT\r\nlast-modified: Wed, 21 Jan 2026 01:59:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:JZ3VBHhltx2UFvBHF314XnvA3LTVgtWidqBYzb66XmI=:\r\nfly-request-id: 01KFF4EDDQY3GC3BTWF3JSTRCD-arn\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":2280095,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cdebfd837a614db3f1a34e5ba5d26ba7","sha1":"5375719e8a99e16bd34b48db02663212122f7f83","sha256":"ed364e448a04a70a3898e8a1d5f82f5498e84888bee89732e0e39068f10adf17","sha512":"65f5bd6e281d0b1e2b727b4dc448b51c2c83f47eaf8d2eef6a418912f04a18319014bd39701049082cf9113d28b718a60bdafb44e3f21fe7bed32ffc74b92c66","ssdeep":"12288:9KH++FOgb5DT1KR+oxrhOM3KIOwPHhWwnvA4w7hK0RuHeFyzH1YD:90M+oxrhOM3KIOwPHhWMS7MHeAzHo","tlshash":"cb256cd473a5b027875b90e6547b0006f33d7899180d882cf61ce8eb79a485972fbfb9","first_seen":"2026-01-27T00:41:22.219913Z","last_seen":"2026-05-05T12:40:50.114003Z","times_seen":4,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-13","alert":"Hunting_JS_WebAssembly","trigger":"unpkg.com/@splinetool/viewer@1.12.39/build/spline-viewer.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:20.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":430,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:19.899Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:19.899Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:31:23 GMT\r\ndate: Fri, 13 Feb 2026 22:31:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-07T18:24:37.825049Z","times_seen":39635,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:24.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":430,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:23.896Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:23.896Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:31:10 GMT\r\ndate: Fri, 13 Feb 2026 22:31:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-07T18:24:37.825049Z","times_seen":39635,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":200,"dns":1,"connect":18,"send":0,"wait":33,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:17.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: application/json\r\nContent-Length: 263\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":263,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8d449432-411b-41a7-9c96-b2ddd94b4014\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"AI-Powered Financial Data Analysis \u0026 Visualization Tool\",\"hostname\":\"cashflowapp.click\",\"url\":\"https://cashflowapp.click/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6RF0PyC27NTwTWzCt3hbLeSzN6UBS5KvVzp4o2Pf1fb%2BtYbp1RIae84Rtk4ZF4bRkHh61UKUiDD2zMOIj1boBfnlk%2B6OWsKdgxbMRBhf7Iz7j4%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd7c66efbdd0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0c08e1702c1428915b7a3cadb122345","sha1":"6c90e12fabea9eef5262ad04ba54c86c23e94331","sha256":"b89332cded0d4073f46bb9978ea0f85a269509dfc4ef3e49980d7666a6f7d5f4","sha512":"cf1a1ba4627fd092267868db268f56a7f7cc66b425d108f903cc482c9adae155a2c860932cbbc8b4460dbe043653160118a79e18bac774983ebf5ee2fa7c37a2","ssdeep":"","tlshash":"c2e0f13c945c4ba9639b2742cc84064c4dcb13b519b800f9f0da7820de7bfc71441676","first_seen":"2026-02-13T22:32:28.893565Z","last_seen":"2026-02-13T22:32:28.893565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-lf1rEL2v.css","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-lf1rEL2v.css HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6779dfa35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195982,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f64badf43bef746309fff9bd7829110","sha1":"e1774e9817869c68087ba4664d50d41409d34528","sha256":"3455935ea8c06dbe3fbbd3dc6b3af6bed87160cd7b1c51d435c020df2a29b538","sha512":"264434c835024958525eae5ebd66ba45226cb2285232dbb8f9c33f45f0c44cfb4df7ab94ef4f4f84abff65cc58f70c759df502aca534d3e2183856a6e0b4afb8","ssdeep":"3072:9RbvVBhqtdypbPybKrUHlUzTbSPFAtMq+WDhKAjiT7TK:9LBhqtdQzTOPFAtMq+WDhKAjK7TK","tlshash":"9214d5a0b2b5e53bbc2774fd938ce45c911970c4ed2983eef919a11117c3bf618aba14","first_seen":"2026-02-13T13:39:42.476575Z","last_seen":"2026-02-13T22:32:28.871708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:29.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 155\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{\"domain\":\"cashflowapp.click\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:29 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBnUJGO8eNL8tgHyM\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:29\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 62d998106efc43b39749e46b389cb3fb\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:31:14.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c659598e35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28182)","md5":"a59171d967bdee99b7e296595ee0e826","sha1":"3f19c2cb7479216f7773aa692c3bc07f05784b91","sha256":"22573d9e5742d9d893cd313fa379fefedd15cb07efc3ad8ff480ad5de5c0bf9d","sha512":"5bbff5c4c52d0d71a0bc729f1eb9678ba2052b7d99113f0eedd4f07b7c2338cf99ee7b4bd5f89c5362ce4073642b47b4aa57d2ea558436a84907e589e98c2be4","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt1:DrnxPOvyJZYLN","tlshash":"b1848e98327925796ea302e5a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-13T13:39:42.474313Z","last_seen":"2026-02-13T22:32:28.8772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:27.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-BYwoJzll.js HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6a9bf3435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7908047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36363)","md5":"75a3c4e9bf5c3d88fa4fd7f563a59d30","sha1":"acfb5abc2116372fbd495c6b052298aec3278097","sha256":"5bd1ec777e3afebe6db7bcb0add2b5f7ca0b71561a3ff368a3e6e0f882a6ef8b","sha512":"73b0a0e886fe0d11036849bd90fcb720cc88e02ecd6187c98794731bbbf91ba80c248940b2193d05cf8d070c6abd3f489935c8d54bc5714696b2c18c8f50cf42","ssdeep":"24576:09oXmcSk4vjwRDpIf2PolgTGKTltutSvfVH:0gmPk4vjwRDpIOPolgTGKTHutSvfVH","tlshash":"90258db9318574298b9346d1907f5207713c1979b00cc0a4f669e8ba6df5c8b21bbfbe","first_seen":"2026-02-13T13:39:42.479796Z","last_seen":"2026-02-13T22:32:28.898667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:27.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r47kwoxgLv6JAmoX%2BPOw%2FCIq1%2FRfqhXC%2FK%2FkjWDWZF6QEemn5LdXTL8sPLW1Rem6QLmantcXydnHLvl69ubpWXVFDKgEbhbtIshTQX9jUGoc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c6a9bdad82b3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-08-06T09:57:23.56935Z","times_seen":721,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"private-us-east-1.manuscdn.com/sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__","fqdn":"private-us-east-1.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:28.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /sessionFile/DrUR2V57fl6T4FQVPzewkB/sandbox/kRYlo4uOcvzkQpE91FmDvr-img-2_1770823449000_na1fn_Y2FzaGZsb3ctY29waWxvdC1mYXZpY29u.png?x-oss-process=image/resize,w_180,h_180/format,webp/quality,q_80\u0026Expires=1798761600\u0026Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9wcml2YXRlLXVzLWVhc3QtMS5tYW51c2Nkbi5jb20vc2Vzc2lvbkZpbGUvRHJVUjJWNTdmbDZUNEZRVlB6ZXdrQi9zYW5kYm94L2tSWWxvNHVPY3Z6a1FwRTkxRm1EdnItaW1nLTJfMTc3MDgyMzQ0OTAwMF9uYTFmbl9ZMkZ6YUdac2IzY3RZMjl3YVd4dmRDMW1ZWFpwWTI5dS5wbmc~eC1vc3MtcHJvY2Vzcz1pbWFnZS9yZXNpemUsd18xOTIwLGhfMTkyMC9mb3JtYXQsd2VicC9xdWFsaXR5LHFfODAiLCJDb25kaXRpb24iOnsiRGF0ZUxlc3NUaGFuIjp7IkFXUzpFcG9jaFRpbWUiOjE3OTg3NjE2MDB9fX1dfQ__\u0026Key-Pair-Id=K2HSFNDJXOU9YS\u0026Signature=byNWCZX7BeUWbX7J6mxWNxkHiDHuHl31E0czUQoORi3p7D4BTaSZEUsGJ3sXutUfhrhUtHkTtRkCfW3cpaQYjyvejOqgLczw8Eyz8H131QR-M83CIAnEcu2E-rIqmhBqNX0O7oqGGk6EQ~7KHa~2cN6YpmEiEsthjFYqQgBEX~fzbDZdpyQc5rYcgUHPlxMoCTM5KbCJeb7NpPiaWPqzARQuVqryA54IHcR~jvy9houVLQ3wlHKxINZrnE72RuFGjg8gn96CwDhhw7ckF91rVbpLxEPB0Xskr4FKxKyKWR~ALxY0gcEo94E~Kep72Om7p71Q4xQaYA-m1Wbxe~eLoQ__ HTTP/1.1\r\nHost: private-us-east-1.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: CloudFront\r\ndate: Fri, 13 Feb 2026 22:31:28 GMT\r\ncontent-type: text/xml\r\ncontent-length: 110\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 0KUHBWTeSfF_eB0ivXAHSgEnzCYeUQJ9Hhf44AGeOYJ09iCKrfFS-Q==\r\ncache-control: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:30.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: application/json\r\nContent-Length: 263\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":263,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8d449432-411b-41a7-9c96-b2ddd94b4014\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"AI-Powered Financial Data Analysis \u0026 Visualization Tool\",\"hostname\":\"cashflowapp.click\",\"url\":\"https://cashflowapp.click/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:30 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41mP%2FCyn5q%2FxoNVlCSUIxLaiIpTIlwW6Q0O44L9%2FnQ0hETHcHnMIDrqXF4pviR1xwYNI1VX%2BHERKhtxA2K0bmkzc4Rj9TAw7bVQ0oTBSK0dHduI%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd7c6bd8c5e0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2df24fc8061f5c280aba61c24051f2c4","sha1":"c5d0b4c5e688bba4cfc3f4c06dfd1424606168a1","sha256":"f6f0712dfde997dd7721047107df8aa9ca6755a22470a42762448e6b5b9d70f3","sha512":"f642195322964326d2f97d6b7b5945322c7a4947d2c9ecd440e80f15df83c2a31089f619ae75436ad33df53ef126cfda9a7d44c23e07e0be6071cb87ee6e4812","ssdeep":"","tlshash":"ace0f13d514c4b66679f3343cc88164c0eda13f21eb400a9b4d96430ce7aedb104ae21","first_seen":"2026-02-13T22:32:28.903288Z","last_seen":"2026-02-13T22:32:28.903288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 08:20:46 GMT\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: K0dB3XApVlvVbA5wICE_gF9Xof1iLWAAK_Pb9Ed2ocMcN3uFk6Qyvg==\r\nage: 59642\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:22.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 35\r\nserver: cloudflare\r\ncf-ray: 9cd7c68b3b3e35a6-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: trpc-accept, Accept-Encoding\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"66bbd4885819692adc970633d13ebcc4","sha1":"4b257f0f5fce8e35a9a4bd1efea7d2dfe27b8525","sha256":"6578578485e8b3efa9586df2647cea5d7eb0e7fec6a0ae9be8002f1b86b36556","sha512":"7d20659c1a98395cb3fc5dff298da69a5331da589b2c6c2ace3a7f6d7d485569e65cdbd8518491af239a2993719d5996b257587c1bb66d6aa4f3574dabcb7f00","ssdeep":"","tlshash":"19800088bcc003080e28ce8aec00808283083a2a02288e2a00883a0082c803c3ab8a20","first_seen":"2023-06-03T07:14:51Z","last_seen":"2026-08-06T11:26:01.687293Z","times_seen":362,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:17.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashflowapp.click/\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 13 Feb 2026 22:31:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J20f%2FH2DWDb%2F9bCOp8j%2BBVfru%2Bm5KbB8An8Rh62K%2BlmKrElbQM99SACsiXdDdpdfHnstshtdCOyRx0Pk3jOc7EHMASBHqEq46dKL%2BRX9mMGD76s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c66e1bbb0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/spline-embed.html","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:17.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /spline-embed.html HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:21.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashflowapp.click/\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 13 Feb 2026 22:31:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKasQib2iDH2nPp7iF9qY3NmwvQWDT09FYLTnmSfBS7WOR8ZkqWh2fviuTlnhZyoagqFPJGftx7zL4cQwHJhadZA6BMtrheN5z7ZyoDNcJW5QzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c6893ee10d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:25.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 155\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":\"https://cashflowapp.click/\",\"p\":{\"domain\":\"cashflowapp.click\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvBYrA-Y9q2h0txe0F\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:25\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 74742c6ceb1a919a1dcd7c0ccb8ef26c\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:29.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 17:37:22 GMT","end":"Tue, 05 May 2026 18:33:32 GMT"},"fingerprint":{"sha1":"63:B8:06:40:C0:B2:87:2F:E4:59:85:E1:7D:5B:AF:FA:91:6A:5D:DB","sha256":"A9:CD:C3:D7:C6:E1:3E:96:53:61:20:80:EB:96:70:09:B5:79:69:87:FC:90:25:C0:7C:07:AC:87:B7:B4:A9:56"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashflowapp.click/\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 13 Feb 2026 22:31:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gH10%2BSlSdKu7UeT825qpix0i9bDNShqgtL3oOy821MS6urA3ZFYqxy5Fa329HaROsAgmEGQoa%2FbwUcauQ%2FmUpW4HbOucgFHRihm8VAj9hBOE08U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c6bbdc480d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:16.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":430,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:15.711Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:15.711Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"34.230.98.53","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:12.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":430,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:11.896Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://cashflowapp.click/\"},\"event_at\":\"2026-02-13T22:31:11.896Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":1021,"timings":{"blocked":459,"dns":14,"connect":93,"send":0,"wait":99,"receive":0,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/spline-embed.html","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:22.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /spline-embed.html HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:31:14 GMT\r\ndate: Fri, 13 Feb 2026 22:31:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-07T18:24:37.825049Z","times_seen":39635,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:31:18 GMT\r\ndate: Fri, 13 Feb 2026 22:31:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-07T18:24:37.825049Z","times_seen":39635,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:23 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 11:48:12\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 7ac74e742b039af39f66e56cf508765a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-08-04T17:35:09.037034Z","times_seen":435,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/?","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:31:26.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6a4d89235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376190,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28182)","md5":"a59171d967bdee99b7e296595ee0e826","sha1":"3f19c2cb7479216f7773aa692c3bc07f05784b91","sha256":"22573d9e5742d9d893cd313fa379fefedd15cb07efc3ad8ff480ad5de5c0bf9d","sha512":"5bbff5c4c52d0d71a0bc729f1eb9678ba2052b7d99113f0eedd4f07b7c2338cf99ee7b4bd5f89c5362ce4073642b47b4aa57d2ea558436a84907e589e98c2be4","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt1:DrnxPOvyJZYLN","tlshash":"b1848e98327925796ea302e5a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-13T13:39:42.474313Z","last_seen":"2026-02-13T22:32:28.8772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-BYwoJzll.js HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c643986835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7908047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36363)","md5":"75a3c4e9bf5c3d88fa4fd7f563a59d30","sha1":"acfb5abc2116372fbd495c6b052298aec3278097","sha256":"5bd1ec777e3afebe6db7bcb0add2b5f7ca0b71561a3ff368a3e6e0f882a6ef8b","sha512":"73b0a0e886fe0d11036849bd90fcb720cc88e02ecd6187c98794731bbbf91ba80c248940b2193d05cf8d070c6abd3f489935c8d54bc5714696b2c18c8f50cf42","ssdeep":"24576:09oXmcSk4vjwRDpIf2PolgTGKTltutSvfVH:0gmPk4vjwRDpIOPolgTGKTHutSvfVH","tlshash":"90258db9318574298b9346d1907f5207713c1979b00cc0a4f669e8ba6df5c8b21bbfbe","first_seen":"2026-02-13T13:39:42.479796Z","last_seen":"2026-02-13T22:32:28.898667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-lf1rEL2v.css","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-lf1rEL2v.css HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c643986f35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195982,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f64badf43bef746309fff9bd7829110","sha1":"e1774e9817869c68087ba4664d50d41409d34528","sha256":"3455935ea8c06dbe3fbbd3dc6b3af6bed87160cd7b1c51d435c020df2a29b538","sha512":"264434c835024958525eae5ebd66ba45226cb2285232dbb8f9c33f45f0c44cfb4df7ab94ef4f4f84abff65cc58f70c759df502aca534d3e2183856a6e0b4afb8","ssdeep":"3072:9RbvVBhqtdypbPybKrUHlUzTbSPFAtMq+WDhKAjiT7TK:9LBhqtdQzTOPFAtMq+WDhKAjK7TK","tlshash":"9214d5a0b2b5e53bbc2774fd938ce45c911970c4ed2983eef919a11117c3bf618aba14","first_seen":"2026-02-13T13:39:42.476575Z","last_seen":"2026-02-13T22:32:28.871708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:10.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 08:20:46 GMT\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: EbDAq2dFr3tlsi1IVkTFqXouxhWWTrDASnzPvhKyjbR2Abm3BMWXNw==\r\nage: 59638\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-08-06T09:57:23.572192Z","times_seen":316,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":40,"dns":8,"connect":14,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:13.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashflowapp.click/\r\nContent-Type: text/plain\r\nContent-Length: 131\r\nOrigin: https://cashflowapp.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":131,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://cashflowapp.click/\",\"d\":\"manus.space\",\"r\":null,\"p\":{\"domain\":\"cashflowapp.click\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 13 Feb 2026 22:31:13 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJPvArJa1fellQsTZN6U\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/13/2026 22:31:13\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 6035cdf1a01fd5e1601effb6219705ed\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-07T18:19:24.107003Z","times_seen":446333,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":32,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:14.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-BYwoJzll.js HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:15 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c65d9d7435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7908047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36363)","md5":"75a3c4e9bf5c3d88fa4fd7f563a59d30","sha1":"acfb5abc2116372fbd495c6b052298aec3278097","sha256":"5bd1ec777e3afebe6db7bcb0add2b5f7ca0b71561a3ff368a3e6e0f882a6ef8b","sha512":"73b0a0e886fe0d11036849bd90fcb720cc88e02ecd6187c98794731bbbf91ba80c248940b2193d05cf8d070c6abd3f489935c8d54bc5714696b2c18c8f50cf42","ssdeep":"24576:09oXmcSk4vjwRDpIf2PolgTGKTltutSvfVH:0gmPk4vjwRDpIOPolgTGKTHutSvfVH","tlshash":"90258db9318574298b9346d1907f5207713c1979b00cc0a4f669e8ba6df5c8b21bbfbe","first_seen":"2026-02-13T13:39:42.479796Z","last_seen":"2026-02-13T22:32:28.898667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:18.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-BYwoJzll.js HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6779df635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7908047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36363)","md5":"75a3c4e9bf5c3d88fa4fd7f563a59d30","sha1":"acfb5abc2116372fbd495c6b052298aec3278097","sha256":"5bd1ec777e3afebe6db7bcb0add2b5f7ca0b71561a3ff368a3e6e0f882a6ef8b","sha512":"73b0a0e886fe0d11036849bd90fcb720cc88e02ecd6187c98794731bbbf91ba80c248940b2193d05cf8d070c6abd3f489935c8d54bc5714696b2c18c8f50cf42","ssdeep":"24576:09oXmcSk4vjwRDpIf2PolgTGKTltutSvfVH:0gmPk4vjwRDpIOPolgTGKTHutSvfVH","tlshash":"90258db9318574298b9346d1907f5207713c1979b00cc0a4f669e8ba6df5c8b21bbfbe","first_seen":"2026-02-13T13:39:42.479796Z","last_seen":"2026-02-13T22:32:28.898667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/assets/index-BYwoJzll.js","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"104.18.26.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:23.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /assets/index-BYwoJzll.js HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:31:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd7c6910d4835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7908047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36363)","md5":"75a3c4e9bf5c3d88fa4fd7f563a59d30","sha1":"acfb5abc2116372fbd495c6b052298aec3278097","sha256":"5bd1ec777e3afebe6db7bcb0add2b5f7ca0b71561a3ff368a3e6e0f882a6ef8b","sha512":"73b0a0e886fe0d11036849bd90fcb720cc88e02ecd6187c98794731bbbf91ba80c248940b2193d05cf8d070c6abd3f489935c8d54bc5714696b2c18c8f50cf42","ssdeep":"24576:09oXmcSk4vjwRDpIf2PolgTGKTltutSvfVH:0gmPk4vjwRDpIOPolgTGKTHutSvfVH","tlshash":"90258db9318574298b9346d1907f5207713c1979b00cc0a4f669e8ba6df5c8b21bbfbe","first_seen":"2026-02-13T13:39:42.479796Z","last_seen":"2026-02-13T22:32:28.898667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:27.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:31:27 GMT\r\ndate: Fri, 13 Feb 2026 22:31:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-07T18:24:37.825049Z","times_seen":39635,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/spline-embed.html","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cashflowapp.click/?","date":"2026-02-13T22:31:30.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /spline-embed.html HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowapp.click/spline-embed.html","fqdn":"cashflowapp.click","domain":"cashflowapp.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cashflowapp.click/","date":"2026-02-13T22:31:13.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowapp.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:45:19 GMT","end":"Sun, 19 Apr 2026 22:45:11 GMT"},"fingerprint":{"sha1":"81:CD:90:C5:58:73:A5:3D:70:5D:CD:D4:70:F2:20:E1:CD:0A:74:67","sha256":"87:AE:C2:CD:4D:28:80:69:49:5A:94:99:49:C1:6E:61:BA:03:A5:55:9B:C0:1F:DE:E0:22:10:2A:91:62:98:2E"}}},"request":{"raw":"GET /spline-embed.html HTTP/1.1\r\nHost: cashflowapp.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowapp.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T18:24:21.030878Z","times_seen":17765479,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cashflowapp.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}