{"report_id":"1989b4d5-9ffc-4901-9242-e3b32acb0dae","version":0,"status":"done","tags":[],"date":"2026-07-30T21:11:40Z","url":{"schema":"https","addr":"hoodflip.xyz/","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hoodflip.xyz/","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"title":"HoodFlip — Double or nothing on Robinhood Chain","dom":{"size":43396,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39765)","md5":"ba5c90ebb543b1c57cc6dc24daaa311d","sha1":"434ef9d5cb6a6c56a6c3f94489f61480021e13c5","sha256":"8f3a8d14ceb64263611f6adeaeee1fb874c0bc743dd17ee03ca2c3c5cf97de01","sha512":"bf905a2d584aa776f446eb92c41d7e1c77405fa43949ccdda0bd154348e07ceb76364cc8b805099391ebb147446e8f120b3c5a3afd72808d697069ceaa69247c","ssdeep":"768:GMxERBhfhGRVHUh3RVHHRVhth4hORVHnRVHcRVhhhGR5u8RynRy/AQRy+zRRyRES:fxCBhfh0VHUhhVHxVhth4h8VHRVH6VhF","tlshash":"99138667d281023f2463c3edb149b3a175abe48ec91190649e6ecbb8f5bbce5f071491","dom_hash":"domhash8630c2dda0fed6c299eac1c85addea4d","first_seen":"2026-07-30T21:05:37.052236Z","last_seen":"2026-07-30T21:12:28.636245Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hoodflip.xyz/","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"172.67.135.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T21:11:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"hoodflip.xyz","ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-07-30T21:05:31.841721Z","last_seen":"2026-07-30T21:05:31.841721Z","alert_count":27,"request_count":27,"received_data":2269901,"sent_data":12283,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-07-26T02:35:00.635862Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":13368,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-07-26T02:35:00.129506Z","alert_count":0,"request_count":1,"received_data":362,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":4,"received_data":171136,"sent_data":2277,"comment":"","tags":null,"fingerprints":null},{"fqdn":"robinhoodchain.blockscout.com","ip":{"addr":"104.26.1.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-06-10","domain_rank":0,"first_seen":"2026-07-10T15:59:53.514661Z","last_seen":"2026-07-28T14:58:27.118491Z","alert_count":0,"request_count":4,"received_data":310009,"sent_data":2120,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"robinhood-mainnet.g.alchemy.com","ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"1993-03-24","domain_rank":0,"first_seen":"2026-07-04T06:17:07.315811Z","last_seen":"2026-07-30T21:05:32.432454Z","alert_count":0,"request_count":16,"received_data":6434,"sent_data":9000,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hoodflip.xyz/assets/SIWXUtil-CJb8nNMT.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e3b724f22e017efc4ba533efe75598d","sha1":"ce7b7090c88caed38938ee32dc02c0f0d475f51f","sha256":"18c4439f259b60d62763a279c8c7c26b083bd88d1258cb1a29f3c5e130977004","sha512":"07428ec4acc760a0cdcd11fab85f2f10b2b96889095b7e1dc266c8be0c1245b59d40a7987bd8483e5ef7692870db0fd57e369a9adbc6c6bc9158ebe43dd74b93","ssdeep":"96:M/Fi/iBfxKysukxrHxIZ1C4lS2+03lnHLfNMfMCJ:ww/isukZiZ1PEgh7NhCJ","tlshash":"5f91d852d3ba39bc0f9c1019366c331163644ded8d27b41efb180daae3d568089d9fb1","size":4323,"data":"","first_seen":"2026-07-30T21:05:37.091164Z","last_seen":"2026-07-30T21:12:28.655281Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/lit-Cbk7b9dC.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f96d0f95e7aa891a9d973a87b79fdcf2","sha1":"08873ba4cd0832d1daaf96a9173e49972f14f67e","sha256":"ccfe87cbbd2aa2efeb43e94cc8d59b7b04c7b497cd35cae4c077f94be28e5f6a","sha512":"1891144dfa53b0cf4baf2b62b81f248a9e9d33d7f6af4f450957c8cead815eb8aea111d7f7afe528cfc6697dc1f2e2b6913df10875ac4ad2d9c7cee70889611a","ssdeep":"192:XKf5gagmpeo8Wb9u7ww9mGLi5KKolFyBjbrKLyG7U5Akzl5XrOvKV1AKLwxJt:XELgmQmb9unrsjHKTcbZDA/j","tlshash":"8262a7a573e9a4b25ad9c2969c36051be39130e8383d542c7678b9ef546ce42b0fcf70","size":15001,"data":"","first_seen":"2026-06-12T12:57:53.313954Z","last_seen":"2026-08-16T04:53:28.707135Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/ConstantsUtil-CjQEB5IA.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cf22e4c95876bfa6b562fde438a7329","sha1":"d689369e36acbfb14b461a1342feef269f3b8996","sha256":"8889b86bf1bf5e3d340c072b38f567fc1b959cac7f3d5ca53d742c912a3cbe17","sha512":"ee7c83c6bd14dfdac41ceea809e674bf50b152ddb6bbd12e3e5cdb394ea453a2a55e3189a98dc3ec4a08b917b5690f976ee0e710295f6c99a1f91d09322a6b71","ssdeep":"3072:Pm/dyoVUVb0OnmRmI/ypEd/S9TtljxPQij5:Y8MUVb0OnmRmI/ypENSRWA","tlshash":"7cc32bc1b6a0f577372b50bd32da5609e27018c24806f5adb5fc4182af816e785ffe22","size":125255,"data":"","first_seen":"2026-07-30T21:05:37.078646Z","last_seen":"2026-07-30T21:12:28.652902Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/dist-CZWQr1ip.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc894411626a6f9ed5a00585d157e94a","sha1":"65568c2f8e43846397c401473a1b2613d654189b","sha256":"ffc47ba22240cf80fbb7d89419401ee6303e961f6c2579da8c652cad7083c4d0","sha512":"c974c94c3e1a4fd7d08e07f65959f5e03b6c9c2159a5307af8c3ad8789622a580fad81317081593dde312fd633837ae49898478556a8eab4197ac09839239f87","ssdeep":"6144:K5Iqk8ruc2HIieYspzIkNtgFhr8weVTsEqB4ZlSCOcc3VsOj02j:YIaldpa","tlshash":"7b648c94f251b071cbe650aab0373205f235f551d8cd8858f7e4eaba2de8888539bf35","size":311697,"data":"","first_seen":"2026-07-30T21:05:37.090218Z","last_seen":"2026-07-30T21:12:28.654753Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/events-DiprI3cz.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65d818e35d103bb7457f804fed574237","sha1":"7bd7e2b708537845ffa97e2fca8dba4a027950d5","sha256":"b7a95ff5606a1111e76ca712ac84d0aee6194fc36816236e9eff02b37aa43fef","sha512":"5bb3338670d77f61a1ce4c739a788f2f834282ae241c1f4de506d25a861774bde6b75b7ee91ac3d37b2489f88c347b6b2f37fff6448591b0cd5df51603ef57c6","ssdeep":"96:ZzPDny7TgCkL/sP/fVn42h4GIPG6leJcEz:ZzPDnWlkgVF1IPONz","tlshash":"77c131ccb385787013d3d7bb703f620bf2396499a81c5418b252ecf629abd9a4066f74","size":6062,"data":"","first_seen":"2026-07-13T03:58:41.634895Z","last_seen":"2026-08-14T17:08:59.538775Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index.es-D8AjC1l5.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af9516f767b9b5f93c5d72ae1f255da9","sha1":"c42a143e083d8d8e9250cbd681220537c7648ff2","sha256":"a4e2bb3918bfaa7f762c91184771c2545c5bf03d4476bcfb0082fc89d63c03b8","sha512":"e367eec74110ccbdf9fada0456b3a2dffc27c15aaf3d8b74959a5ce2a9c975065f6c0cf657276fba6fba1c57c3c68aaf21304b0260dffc65f4d2473e450ea3fa","ssdeep":"768:8HFF9vJW/1kK23NFy6Vyj1zP9v1gmJdZtuJsad2HBgdVdPgyg2w7vOTf:OxYeK8Py/pzP9v7JdZ6Rf","tlshash":"2df2d6dc73e1f4a213a7a065843f0407f3396895685c5058f218ecf6b8b889d9a67fbd","size":37231,"data":"","first_seen":"2026-07-13T03:58:41.643101Z","last_seen":"2026-08-01T22:09:07.959475Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/safeWallet-5MNKTR5Z-Ba8u5lpn.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b167795061878a4c998cbd111e37725f","sha1":"c6b8602f8a41f00b3269d893ae01fa2e8213745d","sha256":"2d389e7248d03f2e165abf338f50ea92584899abe3161dec222908af73cfc4b7","sha512":"1acff607b947b88880d5de19ae6c2fccfd6939ca2198dff746909cbd308929a601b8db23e0c9aa1278b5028caa95b8a5bc6ed2e4337ccd3ff2057cf789a5717b","ssdeep":"","tlshash":"9231f17d24b46dc4993ac3b38101332e51713e7bfc39a9c5ee46603ae91a80431d8e77","size":1818,"data":"","first_seen":"2025-07-12T13:55:10.811554Z","last_seen":"2026-08-04T04:16:03.268205Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/utils-CGq_Culp.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44a3f748dc8d4f94159ac87bac04d6ea","sha1":"65ce7cad799f46bbb9f7e6869e33c72a30e826b5","sha256":"ab321b19ade23b97c4ed647c1eafd9c89577966f9fba636700c9a4cccd44ab82","sha512":"f6521a19f41b23d8b5b7c0e34c26839744ce73163285988b682c662e8e62cc821ddce175e105a800fe67aae126b1b2087159394646ca3e1e9fbf4ae011bd9c0e","ssdeep":"","tlshash":"5041108c7b92f072479724b244bb400ef13a8872459c596492449cb2b8f9bbd86dbd5d","size":2169,"data":"","first_seen":"2026-05-03T09:05:51.236632Z","last_seen":"2026-08-16T04:53:28.453411Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/rainbowWallet-O26YNBMX-CBGCSxd0.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"84081d3948a63252489391b687b075c2","sha1":"b749312e1e3083a73263b7c8f5f8c954e5970b4d","sha256":"d84a29cb2dc25b4f2b31fee3895889f2736907148e99cd31a35e555af9970bff","sha512":"d443183edccd5fa241a05788db7480f7e20be8635c54242d187981248090bf63322d1ddcd835d60ed95a25cf602fd9bbde21f8be8cdb55ec244d5e058d191c49","ssdeep":"96:6z+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+BM:6qpiD470sd93","tlshash":"48b1746d96b96ceedc37e48fdc18670e8020bf17ee0449b1a999db4f1f25818b0e9140","size":5119,"data":"","first_seen":"2025-07-12T13:55:10.820908Z","last_seen":"2026-08-16T04:53:28.468626Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/ConnectorUtil-DpSdCqo1.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"644c503e96845c4c69ade8c760687ff2","sha1":"45a80ad6cd92f3026b075638b6562242e362a3b1","sha256":"e8271016ff84dd09424f11c695f3bb272c9706c932c709b655e3314bd88b7d47","sha512":"c70d94910452520bfbfc43262ad07834bc46078a68edfe4b8f13df136096525ed6765e79113b510b319db21ab0523bf0bb9a62e3b37e90e7dbbbc301ba6db3d3","ssdeep":"96:takMAaao5zbSsSgM06qS6VEcRHT3EjKaIaYvuHddAJ+YJU14GziugUjg/a3:taDAaao5zOsSgM06yT3EjbVYvIh4Izzr","tlshash":"d491564463cab4317b07a154a49544f3b1a54c94922d1aed7fec81fae583fc880bcfea","size":4522,"data":"","first_seen":"2026-07-30T21:05:37.092252Z","last_seen":"2026-07-30T21:12:28.644479Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/utils-Br0svb7K.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44a3f748dc8d4f94159ac87bac04d6ea","sha1":"65ce7cad799f46bbb9f7e6869e33c72a30e826b5","sha256":"ab321b19ade23b97c4ed647c1eafd9c89577966f9fba636700c9a4cccd44ab82","sha512":"f6521a19f41b23d8b5b7c0e34c26839744ce73163285988b682c662e8e62cc821ddce175e105a800fe67aae126b1b2087159394646ca3e1e9fbf4ae011bd9c0e","ssdeep":"","tlshash":"5041108c7b92f072479724b244bb400ef13a8872459c596492449cb2b8f9bbd86dbd5d","size":2169,"data":"","first_seen":"2026-05-03T09:05:51.236632Z","last_seen":"2026-08-16T04:53:28.453411Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/core-DATFKPD0.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6eb102d736910c387f96d82478711e6","sha1":"a8132f85fd4092cdb9a7a7505715c37857b6705f","sha256":"608390e3be9615b911d2d4c8153fa4e111417e1c87fb8c6f525b257bf07def53","sha512":"fa5f55f6b591352d9d14ab64c35a8c0ed1aa8348c536d8b666702e8d80286ddac55ff986f27fb95b7100013cf2b79448a04c608d0359580ceec4d4a4470228c8","ssdeep":"6144:YGxfr4dbWwhU947UI8E1TK7mtZ+tul++XnDf:YGtW1U91E1jLXnr","tlshash":"af643c92737af436439dc25aa8352600f3399898240a443dbe7c7cefea855845a7ff71","size":335407,"data":"","first_seen":"2026-07-30T21:05:37.058715Z","last_seen":"2026-07-30T21:12:28.657973Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/rolldown-runtime-BG2f4sTM.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9e0e9bf8342844a718c1aacdb79c5af","sha1":"e4dddc7d070a10c46c273bcb77c4d44c7d0742c9","sha256":"6cca086e94082e4bf068b37df0975262aae960892417619c2d94b5f27058f428","sha512":"a08126ebe264d2f0f144ba67e7d5e4f2764f3157b226f3ffd0b8d701456eea0f0db2a71fa90ca1badaada2eb7bb5df21a64a4940fc0e3f9b75bc6715ad36ab44","ssdeep":"","tlshash":"462180ef1ad0f2f2224a2381e22c4085e33af43daabc30c0e3688ef165c50c410c8a76","size":1326,"data":"","first_seen":"2026-07-13T03:58:41.632294Z","last_seen":"2026-08-16T04:01:51.080839Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/stringify-DqdtoYVQ.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef13af78e058771439493b72f84e67f5","sha1":"3f9b36bd9c897d9de879863dde24b14b6d406d2e","sha256":"0e26ba9812cd098a359f68d539385f8861821f4233ff2dbad784b7a1dbdba86a","sha512":"5aac1a86ca9973a8631387a5e5cb6d9a4e49f3880ca508e28b1e6cc3dc85450b9ff4208baec6086983ee233de9f950d188df9cae520e2dfe225e1da27e046a9a","ssdeep":"192:/w4RZQLT//rn/Q8CBZASPZMod6npGuSvKpFQSCGNSFJ4J:R2LTXr/Q8CBFPZMosnpGjSpFhCG00J","tlshash":"88e1cac77740b1729bbe8263951b1640f13da4e04499756cb368a8b23ad587843fef39","size":7310,"data":"","first_seen":"2026-07-30T21:05:37.076199Z","last_seen":"2026-08-01T22:09:07.975715Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index-wmdNlBAa.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e990c2ad47a9d57fa76b9ed2bee8e70","sha1":"e561a980fdfa4ce331cde288042582c17928293a","sha256":"c20a4ebab62601eb896d7e7dfac51507d93089b7fd32537c5effd5b8e821bebf","sha512":"44f1671f37dd66a4aef6e0eb525e73aa60838a57e7b3f65b9cdd50c5db395ac574d077c16b32b70741737c07e9ade2dfef59aea090296659da1b6ca2c4e4830c","ssdeep":"6144:sTqBzcqEMW8b8sWPIYLc9AA/pPSYZmMIsyFnciUAQ5vCCqcW4lfSK7E9nyVKl+8P:iDlTESjTMoUzEI8/cPa/aCE3qOVlO2QH","tlshash":"f8155cd573a4b1625797816910af0004f234995a980c4828b7acecbe3ff9dc495fbfb9","size":924515,"data":"","first_seen":"2026-07-30T21:05:37.073066Z","last_seen":"2026-07-30T21:12:28.650017Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index.es-DPpcQBFc.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67cb8ce8833fca68765e9650688e9430","sha1":"19eeb158952a897fe37f0c85f5968d705ad60ce4","sha256":"77639b464b51dbdf82afe833b8e7169825a3469c9eeccb7ddd106af3879b08de","sha512":"7c85292d97f6298b1a98e5e1e052c45cc769fbe9d1792275a56b1e61ac66c3bd64a0d9798b2dbf8dafe08b454a755e038b51cd2f5d7ed73d9371627465ffbb58","ssdeep":"1536:6QWYS47MEr69zx5Lw3eU2Bz60gX/dbhcTlOhBAgsQ:6QWYShFZ0wE/4TlOhBAgr","tlshash":"f9733baa3391b06343ea50a640670806f33e9db65c1d042cf374d9d778a4ad9c6b7f7a","size":79229,"data":"","first_seen":"2026-07-13T03:58:41.641756Z","last_seen":"2026-08-01T22:09:07.965451Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/metaMaskWallet-EI6MED72-BfqZnyky.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4123a083506049971d48e342fda05cb6","sha1":"1e7996dfdded9e673b8ef5c5572015fb256499ac","sha256":"33707b813c24ac7ee79139c3187a05ae48a10c7f621505ada7d559cdcf65ba62","sha512":"23bef8b6bd0f64db1cc60deeef93aeba5948f6d87d00e6dfff553f9108888f6daba32b51e4154bc23a4a67e566c451b392999a97d6174d62d13e3f9ffc037d3f","ssdeep":"","tlshash":"da4131be29321d4f68728c27df891a4e7122ef7bce146865ce69121ccd63719b1f0a31","size":2202,"data":"","first_seen":"2026-05-10T06:41:21.169495Z","last_seen":"2026-08-16T04:53:28.588587Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/base-QS6CYWIN-Dirz7KkB.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b7b04e206704fa67bee5e78407068456","sha1":"3fc7bba3d883c364ead488df6e752bd8dcab9c43","sha256":"d423f8e5ac07b46dcd9a67ab93fcb878393ac9d6c6c4f31e5b124afabb6d3165","sha512":"5f020d8208ddb4bc60dcbfd3248c94e2210decb6452125cbe3c81d56f5e0446d278ccc5d180d1e8236a1d16e72a0f911bb25f9560b92289b68cfcc57e4acce33","ssdeep":"","tlshash":"76113dbc953458cab832d52356396789f123ede7bdb114c2e856b703ce05908a54dfb0","size":901,"data":"","first_seen":"2026-05-07T05:24:14.048826Z","last_seen":"2026-08-01T22:09:07.950409Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/walletConnectWallet-YHWKVTDY-DvZwMEVq.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a554a072f085762f05b96e296b77e03e","sha1":"bd44f805717274fed43ce7cf7cbd2d4cf2ed8ed2","sha256":"6a953cf8d8040375a539e607f7bece8b6fccf1d6a1b14d97ddd94de65bdece00","sha512":"498736547662f13cb7cd22265bbd7e52e94e771b05e62db65af3b4af72e35ee539575e510d2b99bd5394adaf4a351f659ffd7f3364ff67c0e62fece9ecf05e25","ssdeep":"","tlshash":"ac314bef24b03cd9d43bc5639429301e71b23e3bff2d5a559aab62647e65c5020d4633","size":1876,"data":"","first_seen":"2025-07-12T13:55:10.826844Z","last_seen":"2026-08-16T04:53:28.829397Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/assets-Q6ZU7ZJ5-D-Bo-EQf.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c540dc0a9c65e4399a7114b16a08363c","sha1":"669b38f7e81f2f6dd5b15bd5a84404a621aafac5","sha256":"8690341e18e5ea5017731062188baf5077f3bfbe1e64c5d34ceb0eeaad582c4f","sha512":"d34fb05876058f187e3de806ed5ddf6881d2d73d0ea4d9dee6424e35cf631317ab470bf94a3da9310d288587ad2328c6b9e0699a5cab4ea3e574d9bd2c5c8fb8","ssdeep":"384:KpByhqW2xs3dwktSu6foTLEQD4zrlqPqb:KpBSqQ3p8BrlqPqb","tlshash":"8fb278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","size":23618,"data":"","first_seen":"2025-07-12T13:55:10.807562Z","last_seen":"2026-08-16T04:53:28.774701Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/dist-CoS6E-3x.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f395e295166b24ad02144b6478f006d7","sha1":"229ca4b939bf7412c0be7cab6e1662d70647f5bf","sha256":"cce179e6001063ba572410a73c843457967a4cc88fe45a8337ade05bdcb2dd24","sha512":"e728d3764836ca46a4d48aec0ba2d602e5867cf4bdbd120a3c03a599394016d157e2837eec8b9581a2e279b488d388e40f7b71b3542b260632d29fa723a4b23e","ssdeep":"","tlshash":"22113b9436c9b029231bd420d4afc047e26bfa44455e4574e30af6d17e750bcaa6ab38","size":933,"data":"","first_seen":"2026-04-18T22:55:55.026497Z","last_seen":"2026-08-16T04:53:28.622343Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index.es-CkVcKzWr.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5f0a743ff2d9c39c81e2ef303e8755","sha1":"c837172e96f3ea11bcd06c99cf38a71eff5dbf42","sha256":"f483bb404e71eaafee88829285c1515dcf866acc3a8cacd1258c9e71f2a72485","sha512":"2f13832ca8daf947934353ff8d5f99a6c5b2b6fa1d757c8a25a8c250198622a403120c92c8f5513bb0b0b6e465222e4e657c812bdee34217a7863dc3a0fa965e","ssdeep":"3072:VCPKNg0WTCZCUUuSW4pVD01U2iUooJiKX9otDQ:VCPeWCFUuSxnDQUdUjgKX9otDQ","tlshash":"15542b92737af03643ddc26ae8356600f33998582419442cbebc7defaa885445a7ff71","size":287421,"data":"","first_seen":"2026-07-30T21:05:37.054234Z","last_seen":"2026-07-30T21:12:28.647189Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/login-UP3DZBGS-CaoZ1sv9.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5572c8949a59b1d734cd58c6696cec8","sha1":"b50f873e3cafdfdcc1be3f5e6a2fa45ee085f059","sha256":"aee4d5ab56bded7fe644b07391361a0784cbe1a720e657834d4add798d815d29","sha512":"62b44d37b388403073fdab7367ec373404d0ceecd9e4d0633bd99f829477bb79705e1de06bdc8354e469ac99c812ff29c27330e2a5e005cf569ea20bba9001e4","ssdeep":"192:0QSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOL:M4pjZWQufLsSEBovGSjedtqPq2qSqK","tlshash":"8932dbbca5711a5ebc73d417cb55b61980313fefad6488a8dfaab208cb9691cf5e0010","size":11994,"data":"","first_seen":"2025-07-12T13:55:10.725149Z","last_seen":"2026-08-16T04:53:28.515648Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.742Z","timestamp":1785445873742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:11:21 GMT\r\nexpires: Thu, 29 Jul 2027 13:11:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115192\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-16T07:19:30.528015Z","times_seen":27563,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":53,"send":0,"wait":63,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.749Z","timestamp":1785445873749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115257\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T07:28:15.788806Z","times_seen":259796,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":92,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodchain.blockscout.com/api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs","fqdn":"robinhoodchain.blockscout.com","domain":"blockscout.com","tld":"com"},"ip":{"addr":"104.26.1.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.762Z","timestamp":1785445873762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockscout.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 16:44:21 GMT","end":"Wed, 02 Sep 2026 16:44:20 GMT"},"fingerprint":{"sha1":"3D:93:BB:4B:22:C5:84:C9:8A:BE:B8:96:23:0B:69:D2:68:FE:0F:73","sha256":"37:73:E2:45:0D:8E:57:B6:D4:FF:65:50:23:E5:72:D9:55:30:51:05:5B:12:29:64:06:FE:C1:B8:11:C5:59:6A"}}},"request":{"raw":"GET /api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs HTTP/1.1\r\nHost: robinhoodchain.blockscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 21:11:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: bypass-429-option,x-ratelimit-reset,x-ratelimit-limit,x-ratelimit-remaining,api-v2-temp-token\r\nbypass-429-option: temporary_token\r\ncache-control: max-age=0, private, must-revalidate\r\nx-ratelimit-limit: 180\r\nx-ratelimit-remaining: 179\r\nx-ratelimit-reset: 45894\r\nx-request-id: 3608f94e77810aaac38db9e162ed9845\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9GM8bffTBq%2BthXrPpKK5dSdDdxVh%2BxXvncJ938ckEmyVRupdXDvTiDpEb2kUTgaM1u%2BZh2EjNoUu7R8d%2BRcz6pBDvCdkFAoZyCklYzltRZRpSttemla1brj3m9KAfZXjeWewFcZCTFbO8TBn7ca\"}]}\r\ncf-ray: a2375ac7c9255210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102246,"size_decoded":8712,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6221651ea4b796e85ec17096c2f1545a","sha1":"4ebd2e9bd6f8cf853807922aa32c2e750040c26e","sha256":"654bb1c70d3a1de03a0b629f4c6083ed7c560ebaa5fb25e8e28866c1d460ff1e","sha512":"15bbf7f348fabaad6f9f771dfd9da336f5c779dbc1418945d24634a4247586a29277e271491278601f43d0279fc1b767d71f4fdf4e719ddba4e0944ba5370663","ssdeep":"384:R6p66J6K66z6P66L6znT6636Q66l6166K6O66k6166w6B66c6m66k6Og66HH6QrB:UnxwrIrwxiSZ7HRJL0M","tlshash":"c2a3a50014495e7fcacb0a45f6817f06b15f723752cd2c86196e9e7986e60e70a3fb2b","first_seen":"2026-07-30T21:05:37.06465Z","last_seen":"2026-07-30T21:12:28.645363Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5221,"timings":{"blocked":0,"dns":31,"connect":64,"send":0,"wait":5099,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.795Z","timestamp":1785445873795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":8,"connect":76,"send":0,"wait":33,"receive":0,"ssl":368},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/dist-CZWQr1ip.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.937Z","timestamp":1785445873937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/dist-CZWQr1ip.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"dist-CZWQr1ip.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"3fe95c0e964c7f8818ad479c3b695aefc4bf5e1e\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: 4WdZ7_o2SY61Z0bBwoOzXw\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCjDgLgOI1vzAKXKygUQGlGZzrt5MSG2JPlN7%2FCOzXyFHp%2BUxAS64W80GRdWSAyMFsRQlpdop3czR3KvHaUv4PtIPWaZ9Hjqdo28z5YUxRi%2F58hJwxEk7okPBgd6NO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac82e4c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311697,"size_decoded":118543,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc894411626a6f9ed5a00585d157e94a","sha1":"65568c2f8e43846397c401473a1b2613d654189b","sha256":"ffc47ba22240cf80fbb7d89419401ee6303e961f6c2579da8c652cad7083c4d0","sha512":"c974c94c3e1a4fd7d08e07f65959f5e03b6c9c2159a5307af8c3ad8789622a580fad81317081593dde312fd633837ae49898478556a8eab4197ac09839239f87","ssdeep":"6144:K5Iqk8ruc2HIieYspzIkNtgFhr8weVTsEqB4ZlSCOcc3VsOj02j:YIaldpa","tlshash":"7b648c94f251b071cbe650aab0373205f235f551d8cd8858f7e4eaba2de8888539bf35","first_seen":"2026-07-30T21:05:37.090218Z","last_seen":"2026-07-30T21:12:28.654753Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/lit-Cbk7b9dC.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.943Z","timestamp":1785445873943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/lit-Cbk7b9dC.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"lit-Cbk7b9dC.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"87531a377fae8594c3307cef07191bdbb6d199fb\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: G03spmYKQH62Ago2PvyhXg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkQ5pzPDZyf2B%2F9R6mggYi4mbEyEjMf1mK3h3rXZe%2FVg7UG6Vk5lICgOqXkw7DlaKI5HqGYWDB8iWwtbt4HYRFukRLq1mNzypmKKJsEv5ldRZApKKuVIs13WYdnOC%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac82e5076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15001,"size_decoded":6796,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7501)","md5":"f96d0f95e7aa891a9d973a87b79fdcf2","sha1":"08873ba4cd0832d1daaf96a9173e49972f14f67e","sha256":"ccfe87cbbd2aa2efeb43e94cc8d59b7b04c7b497cd35cae4c077f94be28e5f6a","sha512":"1891144dfa53b0cf4baf2b62b81f248a9e9d33d7f6af4f450957c8cead815eb8aea111d7f7afe528cfc6697dc1f2e2b6913df10875ac4ad2d9c7cee70889611a","ssdeep":"192:XKf5gagmpeo8Wb9u7ww9mGLi5KKolFyBjbrKLyG7U5Akzl5XrOvKV1AKLwxJt:XELgmQmb9unrsjHKTcbZDA/j","tlshash":"8262a7a573e9a4b25ad9c2969c36051be39130e8383d542c7678b9ef546ce42b0fcf70","first_seen":"2026-06-12T12:57:53.313954Z","last_seen":"2026-08-16T04:53:28.707135Z","times_seen":94,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=d5e2984dd495a99f5500f4d37e2e1c8e\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:14.103Z","timestamp":1785445874103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /e?projectId=d5e2984dd495a99f5500f4d37e2e1c8e\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 650\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":650,"data":"{\"eventId\":\"5f8cb773-76b3-472c-abf2-e2c1736ef42c\",\"url\":\"https://hoodflip.xyz/\",\"domain\":\"hoodflip.xyz\",\"timestamp\":1785445874055,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"projectId\":\"d5e2984dd495a99f5500f4d37e2e1c8e\",\"networks\":[\"4663\"],\"metadata\":{\"name\":\"HoodFlip\",\"description\":\"HoodFlip\",\"url\":\"https://hoodflip.xyz\",\"icons\":[]},\"showWallets\":true,\"featuredWalletIds\":[],\"excludeWalletIds\":[],\"enableEIP6963\":false,\"enableInjected\":false,\"enableCoinbase\":true,\"enableWalletConnect\":true,\"features\":{\"email\":false,\"socials\":false},\"manualWCControl\":true,\"basic\":true,\"sdkVersion\":\"html-core-1.7.8\",\"siweConfig\":{\"options\":{}}}}}"}},"response":{"raw":"HTTP/3 202 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a2375ac9686186c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1513,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":4,"connect":23,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodchain.blockscout.com/api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs","fqdn":"robinhoodchain.blockscout.com","domain":"blockscout.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:37.766Z","timestamp":1785445897766,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs HTTP/1.1\r\nHost: robinhoodchain.blockscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index-D6N3BcGG.css","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.472Z","timestamp":1785445873472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/index-D6N3BcGG.css HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"index-D6N3BcGG.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"82fc2359678cf2cf59bd2fd488540edd434945c6\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: 397YVrDsQtOVPgx4g4a9AQ\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1g8soVjctImg0CDGMJh1XvlkNS%2FkdGGEa83NfO1taxNjV8WEGt%2FZuQDwLmb4n%2F5RdQK2oFHZ25OjlVyUSF6KBEo4EFkHER0lgxSuVDPe8%2FBSl5EMkrn09RCEHzu25o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac55dfd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51297,"size_decoded":10263,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (51296)","md5":"f550baa994e5da82d7032c3d97557b52","sha1":"93077788dcdb5c6c14f8d6468b663ff554286e67","sha256":"1c88490b01d90c5131e60d63d29b408549ba6f2b039ff5ee2c5122e60a651fb5","sha512":"63b05d36930079e9f1f6356d279e6d392b85e68cee1b2ded7798be46f1f6430843d00df01708775deb10eeb1f07d35c0bab580a8ff4f3d23527ee98421e24602","ssdeep":"768:J3SYR7Awf6y+PXGPF4Ldlwm9d0o0raglVvKNuvFYghDW:hAwiy+Co0LFYn","tlshash":"3033ee593e2c3f38b923a73041c4949c6207b70bde7a43a7acd0621d8dcd7e23669769","first_seen":"2026-07-30T21:05:37.06041Z","last_seen":"2026-07-30T21:12:28.639491Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index.es-D8AjC1l5.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.697Z","timestamp":1785445873697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/index.es-D8AjC1l5.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"index.es-D8AjC1l5.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"8fbb10560e969ef02bd98ef7ae810e5aa2f4448c\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: lxQcM09UTxejoLRePvyhXg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzXFkbI75VXrhGpLv9xdQqBIDDxUF8wHP7Prafd5fVM%2BClfwPbbp2sZp4cQX1M9C%2BM1MzxF2MhLBpfcAfp2DFja1SlzxodORve8ZKrvJMs2mU7jVWjBz5rA79LUwu%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac69e1976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37231,"size_decoded":13640,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30938)","md5":"af9516f767b9b5f93c5d72ae1f255da9","sha1":"c42a143e083d8d8e9250cbd681220537c7648ff2","sha256":"a4e2bb3918bfaa7f762c91184771c2545c5bf03d4476bcfb0082fc89d63c03b8","sha512":"e367eec74110ccbdf9fada0456b3a2dffc27c15aaf3d8b74959a5ce2a9c975065f6c0cf657276fba6fba1c57c3c68aaf21304b0260dffc65f4d2473e450ea3fa","ssdeep":"768:8HFF9vJW/1kK23NFy6Vyj1zP9v1gmJdZtuJsad2HBgdVdPgyg2w7vOTf:OxYeK8Py/pzP9v7JdZ6Rf","tlshash":"2df2d6dc73e1f4a213a7a065843f0407f3396895685c5058f218ecf6b8b889d9a67fbd","first_seen":"2026-07-13T03:58:41.643101Z","last_seen":"2026-08-01T22:09:07.959475Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.791Z","timestamp":1785445873791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":7,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x02ad05c9\",\"to\":\"0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 10\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":364,"mime_type":"application/json","magic":"JSON text data","md5":"09a7fe5acc88340726722d9f54303115","sha1":"ad105e533a769863784b784bef8d9d509fa3e758","sha256":"c35dd16e4147033ae5f664778c2d293b80088ef4f72e108f0569cd17108ab436","sha512":"60ca0c7c47327c27a0637d1fdd9818988983ff4f2e508204f45735a7717b2f6c6b166c897b40b85a882f7247d92e1375769a9e3ff0f0147239f96650865bc0ed","ssdeep":"","tlshash":"88b004cc150d0731c1dc0f01f00c30403151ffd40fc40d41444d15c431441c75704331","first_seen":"2026-07-30T21:05:37.07515Z","last_seen":"2026-07-30T21:12:28.657353Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.797Z","timestamp":1785445873797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/core-DATFKPD0.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.939Z","timestamp":1785445873939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/core-DATFKPD0.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"core-DATFKPD0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"20cabee30717addbbab7da1b5773736b93150a43\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: 1hsuOsueRaiNBvDpozsQ6Q\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DztKMHcpCqNsiRISxo68mGRGBdQQNZpytNejLk6TgW%2FkzpjyMGPwvP%2B0g1AN1pVwvLIgHytWrmcF9HjdlAeaKudkmGq%2F9nP4XDcLPL7LksqIEOq4iLaM36XQANd5ldM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac82e4d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335407,"size_decoded":90336,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"c6eb102d736910c387f96d82478711e6","sha1":"a8132f85fd4092cdb9a7a7505715c37857b6705f","sha256":"608390e3be9615b911d2d4c8153fa4e111417e1c87fb8c6f525b257bf07def53","sha512":"fa5f55f6b591352d9d14ab64c35a8c0ed1aa8348c536d8b666702e8d80286ddac55ff986f27fb95b7100013cf2b79448a04c608d0359580ceec4d4a4470228c8","ssdeep":"6144:YGxfr4dbWwhU947UI8E1TK7mtZ+tul++XnDf:YGtW1U91E1jLXnr","tlshash":"af643c92737af436439dc25aa8352600f3399898240a443dbe7c7cefea855845a7ff71","first_seen":"2026-07-30T21:05:37.058715Z","last_seen":"2026-07-30T21:12:28.657973Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodchain.blockscout.com/api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs","fqdn":"robinhoodchain.blockscout.com","domain":"blockscout.com","tld":"com"},"ip":{"addr":"104.26.1.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:21.765Z","timestamp":1785445881765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockscout.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 16:44:21 GMT","end":"Wed, 02 Sep 2026 16:44:20 GMT"},"fingerprint":{"sha1":"3D:93:BB:4B:22:C5:84:C9:8A:BE:B8:96:23:0B:69:D2:68:FE:0F:73","sha256":"37:73:E2:45:0D:8E:57:B6:D4:FF:65:50:23:E5:72:D9:55:30:51:05:5B:12:29:64:06:FE:C1:B8:11:C5:59:6A"}}},"request":{"raw":"GET /api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs HTTP/1.1\r\nHost: robinhoodchain.blockscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 21:11:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: bypass-429-option,x-ratelimit-reset,x-ratelimit-limit,x-ratelimit-remaining,api-v2-temp-token\r\nbypass-429-option: temporary_token\r\ncache-control: max-age=0, private, must-revalidate\r\nx-ratelimit-limit: 180\r\nx-ratelimit-remaining: 178\r\nx-ratelimit-reset: 38182\r\nx-request-id: ce1428fe25df043cae8eb33c347fa322\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcSTkWRpkIEpJCZ3IpiG32jT%2BwE2l%2FDOan3USED7V30WVJ39YYPYsxlhk0735SPub51sDFybTi8wqKrHyhRNP9D9qYN2SnWXwI0kTUAEYepZZNaAcmKWlK9WTs4yj%2Fiu%2Be6SvM0bIkooCp3oNxfg\"}]}\r\ncf-ray: a2375af9189a5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102246,"size_decoded":8859,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6221651ea4b796e85ec17096c2f1545a","sha1":"4ebd2e9bd6f8cf853807922aa32c2e750040c26e","sha256":"654bb1c70d3a1de03a0b629f4c6083ed7c560ebaa5fb25e8e28866c1d460ff1e","sha512":"15bbf7f348fabaad6f9f771dfd9da336f5c779dbc1418945d24634a4247586a29277e271491278601f43d0279fc1b767d71f4fdf4e719ddba4e0944ba5370663","ssdeep":"384:R6p66J6K66z6P66L6znT6636Q66l6166K6O66k6166w6B66c6m66k6Og66HH6QrB:UnxwrIrwxiSZ7HRJL0M","tlshash":"c2a3a50014495e7fcacb0a45f6817f06b15f723752cd2c86196e9e7986e60e70a3fb2b","first_seen":"2026-07-30T21:05:37.06465Z","last_seen":"2026-07-30T21:12:28.645363Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6703,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6670,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index.es-DPpcQBFc.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.693Z","timestamp":1785445873693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/index.es-DPpcQBFc.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"index.es-DPpcQBFc.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"6622f08f9b2bb6e558b1b661c188e3c0cfeb5dfa\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: iPvGw4pBSRSsFVvAozsQ6Q\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmjeTRA5bZB87Mn0lH76%2F6A6jF0nT1eyLJ7%2B7UItPPVXtJdEoXrYxcgZu%2B1zrUdhZTnipK9Ul9QQPLbSrPCLQbHJ4qxf6z0ymRFzv0BXb5RbKkFClqvGJEPbBYOHO5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac69e1776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79229,"size_decoded":27117,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64791), with no line terminators","md5":"67cb8ce8833fca68765e9650688e9430","sha1":"19eeb158952a897fe37f0c85f5968d705ad60ce4","sha256":"77639b464b51dbdf82afe833b8e7169825a3469c9eeccb7ddd106af3879b08de","sha512":"7c85292d97f6298b1a98e5e1e052c45cc769fbe9d1792275a56b1e61ac66c3bd64a0d9798b2dbf8dafe08b454a755e038b51cd2f5d7ed73d9371627465ffbb58","ssdeep":"1536:6QWYS47MEr69zx5Lw3eU2Bz60gX/dbhcTlOhBAgsQ:6QWYShFZ0wE/4TlOhBAgr","tlshash":"f9733baa3391b06343ea50a640670806f33e9db65c1d042cf374d9d778a4ad9c6b7f7a","first_seen":"2026-07-13T03:58:41.641756Z","last_seen":"2026-08-01T22:09:07.965451Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.747Z","timestamp":1785445873747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115257\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T07:28:15.788806Z","times_seen":259796,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":83,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.775Z","timestamp":1785445873775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":28,"connect":75,"send":0,"wait":33,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.783Z","timestamp":1785445873783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":5,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x7ebdc478\",\"to\":\"0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 5\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":364,"mime_type":"application/json","magic":"JSON text data","md5":"70a6de92fb5c23201ae497be11148eb0","sha1":"e15888bb1063c10bc08ec183122cdc19746e5a36","sha256":"fb0e0e2abe0215319a692d2b7bba1962672e5bf5c0b408967c9d81f95fd98c29","sha512":"390c54071fdd3abc9b58cfa0436b78a5757dd74f1f33073a6a1af5c4b4452f1311b0174cb580dd856e6fdd944ae68629d2b5172a6735a641cf868bd3a41ac2ec","ssdeep":"","tlshash":"e4b004d0571d4735c14c1c11f0043d403141ffc44dc40d07c44d0544135c5475f04331","first_seen":"2026-07-30T21:05:37.074163Z","last_seen":"2026-07-30T21:12:28.641445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/walletConnectWallet-YHWKVTDY-DvZwMEVq.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.785Z","timestamp":1785445873785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/walletConnectWallet-YHWKVTDY-DvZwMEVq.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"walletConnectWallet-YHWKVTDY-DvZwMEVq.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"96dbc3a9c9f93195ce6ffc1c855abe2b0b141267\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: dVLodoYzRGSLuOu5H4GxDA\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7qrtNlPqlQJtqJOQAVuhPWhsX2vCi6CsC1vFedtqF5YSk0vwN%2B%2B%2F%2BwQ%2FQtXMHKzXq%2FuUIEr5SS%2BQhRTGyFrQOrcqVPvSCkIYPj784lS0Ixij%2FdcgZr926HaSeM%2BUT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac74e3176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1876,"size_decoded":1628,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1876), with no line terminators","md5":"a554a072f085762f05b96e296b77e03e","sha1":"bd44f805717274fed43ce7cf7cbd2d4cf2ed8ed2","sha256":"6a953cf8d8040375a539e607f7bece8b6fccf1d6a1b14d97ddd94de65bdece00","sha512":"498736547662f13cb7cd22265bbd7e52e94e771b05e62db65af3b4af72e35ee539575e510d2b99bd5394adaf4a351f659ffd7f3364ff67c0e62fece9ecf05e25","ssdeep":"","tlshash":"ac314bef24b03cd9d43bc5639429301e71b23e3bff2d5a559aab62647e65c5020d4633","first_seen":"2025-07-12T13:55:10.826844Z","last_seen":"2026-08-16T04:53:28.829397Z","times_seen":106,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.789Z","timestamp":1785445873789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":6,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x5c975abb\",\"to\":\"0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 8\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":361,"mime_type":"application/json","magic":"JSON text data","md5":"d4c8dd457cd2e61d0de83354db11da2d","sha1":"ba22d8970bc9ffb938100f0c63bb47aeaf386ada","sha256":"a593615d59eddb6ee22a9af7e063e9f2ac851c9b0d9eae5c29a7e3f9ef5103d3","sha512":"06eec7565bd9c663c20ea5867c6d464394a2d16e84a9b5ee34aee96e17d8e84ccd969d94ce0cefb8421e4ed4ce68bcf44dc9d30b5b691aadd090f56c1163c7e2","ssdeep":"","tlshash":"d5b004c1350d0f71c04c4c01f00530403141ffc40dc40d03444d0f4411441575704331","first_seen":"2025-09-06T11:48:01.516786Z","last_seen":"2026-08-04T04:00:11.341679Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.796Z","timestamp":1785445873796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/ConstantsUtil-CjQEB5IA.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.940Z","timestamp":1785445873940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/ConstantsUtil-CjQEB5IA.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"ConstantsUtil-CjQEB5IA.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"75d19d0cc5b3f9b768e883dd33ff60059d5bdb6f\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: TUVzA7sYTSGnk5SLg4a9AQ\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0LJckFPVoWOhUvnZayrK6ixZMqvh5ZoCmcqHJSmOqCPtkQ4xqv1IpBeZyOGO8bp6tmW5Zqto0z0W5G6ngihRxCftUOTlkf0mExrKSkmZiVJquNZuy5mdEF5Y3nKnXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac82e4e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125255,"size_decoded":34627,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39012)","md5":"1cf22e4c95876bfa6b562fde438a7329","sha1":"d689369e36acbfb14b461a1342feef269f3b8996","sha256":"8889b86bf1bf5e3d340c072b38f567fc1b959cac7f3d5ca53d742c912a3cbe17","sha512":"ee7c83c6bd14dfdac41ceea809e674bf50b152ddb6bbd12e3e5cdb394ea453a2a55e3189a98dc3ec4a08b917b5690f976ee0e710295f6c99a1f91d09322a6b71","ssdeep":"3072:Pm/dyoVUVb0OnmRmI/ypEd/S9TtljxPQij5:Y8MUVb0OnmRmI/ypENSRWA","tlshash":"7cc32bc1b6a0f577372b50bd32da5609e27018c24806f5adb5fc4182af816e785ffe22","first_seen":"2026-07-30T21:05:37.078646Z","last_seen":"2026-07-30T21:12:28.652902Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/stringify-DqdtoYVQ.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.471Z","timestamp":1785445873471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/stringify-DqdtoYVQ.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"stringify-DqdtoYVQ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"5fd3c7a227a19883b37cf629ba844a874c9efc8a\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: Vue-KL01RhuefUypo3UVLg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWa3X5eeCqsYsZCF7s%2F%2Fbhscu1vuORnFAh2v02LuD%2FqKIeB0UWNfTFjLx4k9OI5nelj78Ds9HoFVXZA%2Fj4Ss7XUY%2BXC6iF%2BhUMP30wqYMkop77NfDtrpzzZNfVDx%2Fhc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac55dfc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7310,"size_decoded":3686,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6586)","md5":"ef13af78e058771439493b72f84e67f5","sha1":"3f9b36bd9c897d9de879863dde24b14b6d406d2e","sha256":"0e26ba9812cd098a359f68d539385f8861821f4233ff2dbad784b7a1dbdba86a","sha512":"5aac1a86ca9973a8631387a5e5cb6d9a4e49f3880ca508e28b1e6cc3dc85450b9ff4208baec6086983ee233de9f950d188df9cae520e2dfe225e1da27e046a9a","ssdeep":"192:/w4RZQLT//rn/Q8CBZASPZMod6npGuSvKpFQSCGNSFJ4J:R2LTXr/Q8CBFPZMosnpGjSpFhCG00J","tlshash":"88e1cac77740b1729bbe8263951b1640f13da4e04499756cb368a8b23ad587843fef39","first_seen":"2026-07-30T21:05:37.076199Z","last_seen":"2026-08-01T22:09:07.975715Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/safeWallet-5MNKTR5Z-Ba8u5lpn.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.774Z","timestamp":1785445873774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/safeWallet-5MNKTR5Z-Ba8u5lpn.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"safeWallet-5MNKTR5Z-Ba8u5lpn.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"0769eb87831f42e662b35113c22b7f1e59d54d1e\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: _w5EMqv0Rp21V1QcozsQ6Q\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpQwsStg4aMLUz%2Fgwi48omKsFVf6aAy2QESFpIuoTIQLvFo9SE6DdYv9s5XVbA8mVCY6iRFufcPUuWbagUIiREDVAqRxerZXvNtOE1ytjJwarmpNVLB9UVl7YcgoY%2BU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac73e2c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1818,"size_decoded":1614,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1818), with no line terminators","md5":"b167795061878a4c998cbd111e37725f","sha1":"c6b8602f8a41f00b3269d893ae01fa2e8213745d","sha256":"2d389e7248d03f2e165abf338f50ea92584899abe3161dec222908af73cfc4b7","sha512":"1acff607b947b88880d5de19ae6c2fccfd6939ca2198dff746909cbd308929a601b8db23e0c9aa1278b5028caa95b8a5bc6ed2e4337ccd3ff2057cf789a5717b","ssdeep":"","tlshash":"9231f17d24b46dc4993ac3b38101332e51713e7bfc39a9c5ee46603ae91a80431d8e77","first_seen":"2025-07-12T13:55:10.811554Z","last_seen":"2026-08-04T04:16:03.268205Z","times_seen":17,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/login-UP3DZBGS-CaoZ1sv9.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.787Z","timestamp":1785445873787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/login-UP3DZBGS-CaoZ1sv9.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"login-UP3DZBGS-CaoZ1sv9.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"1ce0dc566e5ba3a3b489600b884b73d9172a1a89\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: MxL3BTPiQXiuGDCjwoOzXw\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bn9iW80ARQeUSx92vGewE3DVcYZyOVsEHt4ZhbOxdPvCHCJC3Tm1cuY3QeBTsHDuuVrzr4JDNR68B1ldEyV6xU%2BeHr5srKOGOfkrx2dTB2n3ugAmYMVNRdhGz5m%2BpRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac74e3376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11994,"size_decoded":3918,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (11994), with no line terminators","md5":"a5572c8949a59b1d734cd58c6696cec8","sha1":"b50f873e3cafdfdcc1be3f5e6a2fa45ee085f059","sha256":"aee4d5ab56bded7fe644b07391361a0784cbe1a720e657834d4add798d815d29","sha512":"62b44d37b388403073fdab7367ec373404d0ceecd9e4d0633bd99f829477bb79705e1de06bdc8354e469ac99c812ff29c27330e2a5e005cf569ea20bba9001e4","ssdeep":"192:0QSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOL:M4pjZWQufLsSEBovGSjedtqPq2qSqK","tlshash":"8932dbbca5711a5ebc73d417cb55b61980313fefad6488a8dfaab208cb9691cf5e0010","first_seen":"2025-07-12T13:55:10.725149Z","last_seen":"2026-08-16T04:53:28.515648Z","times_seen":114,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/ConnectorUtil-DpSdCqo1.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.946Z","timestamp":1785445873946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/ConnectorUtil-DpSdCqo1.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"ConnectorUtil-DpSdCqo1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"f157f808ff5c2fa25aa57149b3fde531bd8f9e5e\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: QyjP75kZSXaIAH67ozsQ6Q\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPzgN8FwF0Xi%2BLLhFH6OCnp%2FPvETgMhp3h02L0uV8uLUBZmpNWWg0uUodqTi3ZuuSsiICaXIEVOgr9d9bgTjwmly8EbpH%2BS20aGeHI0MEi%2FHvmo1UXrR3jJwMveXPAk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac82e5376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4522,"size_decoded":2761,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4522), with no line terminators","md5":"644c503e96845c4c69ade8c760687ff2","sha1":"45a80ad6cd92f3026b075638b6562242e362a3b1","sha256":"e8271016ff84dd09424f11c695f3bb272c9706c932c709b655e3314bd88b7d47","sha512":"c70d94910452520bfbfc43262ad07834bc46078a68edfe4b8f13df136096525ed6765e79113b510b319db21ab0523bf0bb9a62e3b37e90e7dbbbc301ba6db3d3","ssdeep":"96:takMAaao5zbSsSgM06qS6VEcRHT3EjKaIaYvuHddAJ+YJU14GziugUjg/a3:taDAaao5zOsSgM06yT3EjbVYvIh4Izzr","tlshash":"d491564463cab4317b07a154a49544f3b1a54c94922d1aed7fec81fae583fc880bcfea","first_seen":"2026-07-30T21:05:37.092252Z","last_seen":"2026-07-30T21:12:28.644479Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/events-DiprI3cz.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.692Z","timestamp":1785445873692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/events-DiprI3cz.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"events-DiprI3cz.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"f6c8309655aebf40d403fbc7630a3fb17e1101b6\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: De563-uuRFCDkPqyBT7zVQ\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nF8342mOky1rNeSKCsWvf8fm2JVsGv2OIxjFvaZcJrByPT6Vd2p9VsjNe0mLlfbf5brjS9ddZ7XTBoxi2blZMCNjLgW56YIVybWW%2FGeuO%2F2Fr%2FVPzW152zHn4jjZu6c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac69e1676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6062,"size_decoded":3028,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6062), with no line terminators","md5":"65d818e35d103bb7457f804fed574237","sha1":"7bd7e2b708537845ffa97e2fca8dba4a027950d5","sha256":"b7a95ff5606a1111e76ca712ac84d0aee6194fc36816236e9eff02b37aa43fef","sha512":"5bb3338670d77f61a1ce4c739a788f2f834282ae241c1f4de506d25a861774bde6b75b7ee91ac3d37b2489f88c347b6b2f37fff6448591b0cd5df51603ef57c6","ssdeep":"96:ZzPDny7TgCkL/sP/fVn42h4GIPG6leJcEz:ZzPDnWlkgVF1IPONz","tlshash":"77c131ccb385787013d3d7bb703f620bf2396499a81c5418b252ecf629abd9a4066f74","first_seen":"2026-07-13T03:58:41.634895Z","last_seen":"2026-08-14T17:08:59.538775Z","times_seen":77,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.767Z","timestamp":1785445873767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x313ce567\",\"to\":\"0x01b2c0388d6f9a9ae678ed0c80317c3088a35082\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 11\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":364,"mime_type":"application/json","magic":"JSON text data","md5":"cbb8a489d34cea2dc094ce13d68270cc","sha1":"96a6622dc9e03331db45f3be6ed4945e8043240a","sha256":"eb1491e7ee73b8c00c20f6c14cc08ba880f85b8ac95a685f3f6acf426f743d8b","sha512":"1cf08f81c78f205fdfb063fb7de24dffac1df7a55d3d113665d881924fbf194566c40e2672f0d728cd82ee5ccabc56cd4348ed2a7300a7c8cfedd5e0624ef9f7","ssdeep":"","tlshash":"54b004d0550d1731c04c0c01f00434413141ffc50dc40f41454d054413543475705331","first_seen":"2026-07-30T21:11:45.237853Z","last_seen":"2026-07-30T21:12:28.660426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.771Z","timestamp":1785445873771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":32,"connect":78,"send":0,"wait":34,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.776Z","timestamp":1785445873776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x2e5b2168\",\"to\":\"0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 6\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":381,"mime_type":"application/json","magic":"JSON text data","md5":"e649b29942961f2a24722f3985d590c9","sha1":"316808e88957fc454ca6fb70ef2928e0b0e205b2","sha256":"ba16297fd50a157fbac1730ca87780c71bb18727f7ade1d2451354983eef5f28","sha512":"de253dd204d66a7ded3a77f08ee2330b03ec4858e991c149f4bbd68d5648381cb29cbdeb0751b50b4d9f4a3c47caaaf67593b4a146af4b875762d9879adedb23","ssdeep":"","tlshash":"12b002997b0f2bb2d5581d62ad5c70e82151bad50ac50d85488e05956148146df08725","first_seen":"2026-07-30T21:05:37.062624Z","last_seen":"2026-07-30T21:12:28.643771Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.777Z","timestamp":1785445873777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":4,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x24a9d853\",\"to\":\"0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 8\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":364,"mime_type":"application/json","magic":"JSON text data","md5":"cc5b4a72e534aae7ef38395e1f0aaa43","sha1":"9dcf4be5de13f185da4b6e29cdaa4d23669a03ba","sha256":"632124ebfe55b0f0d5d70028cb878a414580df852366267d41ef57fbe979a212","sha512":"bc90bd5dfbe1e7ba42e61acd90bfb5baa75fcf8f705cbfb3297e0f9a687ea99838fa729413b3e0fbd52c845394be107afa96b63770727d26d61d4db381c6cb4a","ssdeep":"","tlshash":"01b004d0150d0771c04c0d01f4153c403151ffc50fc40d07545d05c475c41475704331","first_seen":"2026-07-30T21:05:37.088009Z","last_seen":"2026-07-30T21:12:28.638901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.793Z","timestamp":1785445873793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":9,"connect":77,"send":0,"wait":34,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/SIWXUtil-CJb8nNMT.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.944Z","timestamp":1785445873944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/SIWXUtil-CJb8nNMT.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"SIWXUtil-CJb8nNMT.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"f2d8552a2964543f3b94e08c546f3005f932a4f9\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: OTXu8OIrRVypjv-9BhdwDg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FvnQyA9O772janhGemmEZkOJ5BCxuzhkU63Pp63ASnZWk1wJJbbFZuwzsXj34Ih23h767%2FGsydD1I896lpWwD8%2FkT%2BkjQEUImokLIrJQsz3t9e%2BgSqF4rNU%2Foo9CH0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac82e5176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4323,"size_decoded":2651,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4323), with no line terminators","md5":"4e3b724f22e017efc4ba533efe75598d","sha1":"ce7b7090c88caed38938ee32dc02c0f0d475f51f","sha256":"18c4439f259b60d62763a279c8c7c26b083bd88d1258cb1a29f3c5e130977004","sha512":"07428ec4acc760a0cdcd11fab85f2f10b2b96889095b7e1dc266c8be0c1245b59d40a7987bd8483e5ef7692870db0fd57e369a9adbc6c6bc9158ebe43dd74b93","ssdeep":"96:M/Fi/iBfxKysukxrHxIZ1C4lS2+03lnHLfNMfMCJ:ww/isukZiZ1PEgh7NhCJ","tlshash":"5f91d852d3ba39bc0f9c1019366c331163644ded8d27b41efb180daae3d568089d9fb1","first_seen":"2026-07-30T21:05:37.091164Z","last_seen":"2026-07-30T21:12:28.655281Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/favicon.svg","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:14.511Z","timestamp":1785445874511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-railway-edge: osl1\r\ncontent-disposition: inline; filename=\"favicon.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\netag: W/\"2c9ad647e0c7908316e975037f8bebe1222c69f2\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: QSJQaAagR4ul-h9lozsQ6Q\r\ncontent-encoding: gzip\r\nx-hikari-trace: osl1.sq22\r\nage: 382\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKYnh7rxeSVI5zKDpnZ0xaGmnFocPGFnPhFpVlNWEbC3vJ7A3LfvaPke1sEPN8KDKKxA2mTymnMv2cGyNqh%2BkV4QKWlEqdLCVu0SM6FnFJz05%2BAnpi7FjxWCyZtBqU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375acbbe9d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":754,"size_decoded":1249,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cfa77e69302089a6262af44b5004f5a","sha1":"faab2836d5b07523580e403ff80171a9577fb2fb","sha256":"3a23d82eeb6a2492941e0038f2e2232d777f5ef36607d96ffc33d1e4fbd8c6db","sha512":"f47b0c4c2d4b5eeebd1ca4112e61350a576a7d78f89d7cbc9940cfc1b6789dec6b509326da08f00ff2936fca370f830ea7ade9adc160c36c5d4ffb840589c97b","ssdeep":"","tlshash":"40019cb8c3489a30e52543fcc629f9aa660f70834792f268a554cd30f5318ce62b69d8","first_seen":"2026-07-30T21:05:37.0637Z","last_seen":"2026-07-30T21:12:28.655981Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/metaMaskWallet-EI6MED72-BfqZnyky.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.782Z","timestamp":1785445873782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/metaMaskWallet-EI6MED72-BfqZnyky.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"metaMaskWallet-EI6MED72-BfqZnyky.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"c8b115a91659faa4b8f56a411bba5f4b3957db3d\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: H2v0JD0qQV6sDpkjBhdwDg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bSqkGc4Jker2bt4qJwy783WGZpSm8sanhWCqTXovCMP1nWvMxnPlhlZYnD0ZkMLPENijkWmcI2IR%2FOQFdpmCZVFocvcuz1m4WEF7M5wZiAV2SGHZd4RKBUbRLORDzIY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac74e2f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2202,"size_decoded":1806,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2202), with no line terminators","md5":"4123a083506049971d48e342fda05cb6","sha1":"1e7996dfdded9e673b8ef5c5572015fb256499ac","sha256":"33707b813c24ac7ee79139c3187a05ae48a10c7f621505ada7d559cdcf65ba62","sha512":"23bef8b6bd0f64db1cc60deeef93aeba5948f6d87d00e6dfff553f9108888f6daba32b51e4154bc23a4a67e566c451b392999a97d6174d62d13e3f9ffc037d3f","ssdeep":"","tlshash":"da4131be29321d4f68728c27df891a4e7122ef7bce146865ce69121ccd63719b1f0a31","first_seen":"2026-05-10T06:41:21.169495Z","last_seen":"2026-08-16T04:53:28.588587Z","times_seen":104,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T21:11:12.917Z","timestamp":1785445872917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"index.html\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeHyHJhy00TB5zxJaSjKagwVb3YwT1rsZWvufMACghhBeudiURI3XGV%2Fvx3%2BvWpkxmBle2MLSNrVO3Zi1y%2BAiM3iGCY%2BsO13L6NYavywdrj%2FBjpjdwY9eIedwfEBw7w%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: _exRiCcFSs6eqT94BhdwDg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2375ac1ec2e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2146,"size_decoded":1551,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a289fe52de793a659a7569bc6394fe78","sha1":"ccce3063bf75dce7933351fd38858090f86b7d91","sha256":"5a8a04b8cc2aebb3f1fff9448a4ecb60dbad8599e7f56b6fcb2bd8e62656f587","sha512":"75ffe7b55aa75fa96664ce2e3a107dce9c0e5204c36b940cf6bc5ecbe312144cdb40e0547cf11ebc4c9c0bd6d2448110c657bc3d88494ab6eecb317dac105a95","ssdeep":"","tlshash":"1a41e067a1a184672220c13559d6f049dd02929bc34cbc69bc9e70ae5fc5fc1caf36b5","first_seen":"2026-07-30T21:05:37.07133Z","last_seen":"2026-07-30T21:12:28.659748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":147,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Space+Grotesk:wght@500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.465Z","timestamp":1785445873465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Space+Grotesk:wght@500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Jul 2026 21:11:13 GMT\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12684,"size_decoded":1543,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ace7a0736e70f60cfa28f818ce45cd8f","sha1":"5ad8328bff4bd696b039d299642e2a49a1c59731","sha256":"14043f9be675ed9019705f42c7d821f1611e52dadecce1f33ab504babc3d44db","sha512":"38d2c3255e123e6a0e44040401101c281d551c82cecd0cfff273f390f0a132e0815455f3deca0a7f9f19bfefc628a9ec227f1f79b94b8070e77fabf27721ad1d","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGqC4GRZYiG/W:vXuM0p2+/gt","tlshash":"6e42aa92002ba500ab971dc233cf7e3aaece50896085d5796ffd0cc59cded66436876d","first_seen":"2025-11-07T18:53:01.583288Z","last_seen":"2026-08-11T19:35:41.007483Z","times_seen":40,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":49,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index-wmdNlBAa.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.468Z","timestamp":1785445873468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/index-wmdNlBAa.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"index-wmdNlBAa.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"ace0a308a9f263623c039510540f480a55db22f2\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: IhfxbRTWRxKbFVQdH4GxDA\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVqdPo5UqRFWnQg1YHRgdbg92S0CgolSVd9WOyh9zxtKDEz8TkxsWEmg0X2WuNVZ%2BdvABKZrGQSdnQyAa3Mwzbg8QwlsWz9LdZg9UnSsK%2B1aOyzU%2FSYGC4YyI%2BhHRd0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac55df976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924515,"size_decoded":272816,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43202)","md5":"9e990c2ad47a9d57fa76b9ed2bee8e70","sha1":"e561a980fdfa4ce331cde288042582c17928293a","sha256":"c20a4ebab62601eb896d7e7dfac51507d93089b7fd32537c5effd5b8e821bebf","sha512":"44f1671f37dd66a4aef6e0eb525e73aa60838a57e7b3f65b9cdd50c5db395ac574d077c16b32b70741737c07e9ade2dfef59aea090296659da1b6ca2c4e4830c","ssdeep":"6144:sTqBzcqEMW8b8sWPIYLc9AA/pPSYZmMIsyFnciUAQ5vCCqcW4lfSK7E9nyVKl+8P:iDlTESjTMoUzEI8/cPa/aCE3qOVlO2QH","tlshash":"f8155cd573a4b1625797816910af0004f234995a980c4828b7acecbe3ff9dc495fbfb9","first_seen":"2026-07-30T21:05:37.073066Z","last_seen":"2026-07-30T21:12:28.650017Z","times_seen":3,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/index.es-CkVcKzWr.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.689Z","timestamp":1785445873689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/index.es-CkVcKzWr.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"index.es-CkVcKzWr.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"c4f8655ca42e31b12f1046211e5bcf7e34d1c827\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: 92bPL3SXRiK6GM8HBhdwDg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3Uowl2mFQD6w19GP9d2oxkiB8w0cMFGFRbnAOt53v2b5xogQzg8qUyweGCBUPzdkZRgP1IxPswO1AUZpP6hd9ndxTJna%2FctJLBQ6X1TFBagY8M4tO6swVyqYTQ9hVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac69e1576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287421,"size_decoded":75797,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"7c5f0a743ff2d9c39c81e2ef303e8755","sha1":"c837172e96f3ea11bcd06c99cf38a71eff5dbf42","sha256":"f483bb404e71eaafee88829285c1515dcf866acc3a8cacd1258c9e71f2a72485","sha512":"2f13832ca8daf947934353ff8d5f99a6c5b2b6fa1d757c8a25a8c250198622a403120c92c8f5513bb0b0b6e465222e4e657c812bdee34217a7863dc3a0fa965e","ssdeep":"3072:VCPKNg0WTCZCUUuSW4pVD01U2iUooJiKX9otDQ:VCPeWCFUuSxnDQUdUjgKX9otDQ","tlshash":"15542b92737af03643ddc26ae8356600f33998582419442cbebc7defaa885445a7ff71","first_seen":"2026-07-30T21:05:37.054234Z","last_seen":"2026-07-30T21:12:28.647189Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/dist-CoS6E-3x.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.695Z","timestamp":1785445873695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/dist-CoS6E-3x.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-railway-edge: osl1\r\ncontent-disposition: inline; filename=\"dist-CoS6E-3x.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: W/\"3f08fcaa5ed73974852ef32af62ff489be987872\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: yid5se3aTnmhub0LwoOzXw\r\ncontent-encoding: gzip\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kikfsj8U%2F2PvQbDYse%2FXITxEdMyaPAqpl5voG7z%2BaKF88XoF5nz7ZjiYWUwAJqCpM9aiggs8hhaE2w3gGEPudKV2Y%2BJ1nSm0Gv2nxv5Gl%2F1NdN7ahDmtsPVGJha%2BBq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac69e1876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":933,"size_decoded":1320,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (933), with no line terminators","md5":"f395e295166b24ad02144b6478f006d7","sha1":"229ca4b939bf7412c0be7cab6e1662d70647f5bf","sha256":"cce179e6001063ba572410a73c843457967a4cc88fe45a8337ade05bdcb2dd24","sha512":"e728d3764836ca46a4d48aec0ba2d602e5867cf4bdbd120a3c03a599394016d157e2837eec8b9581a2e279b488d388e40f7b71b3542b260632d29fa723a4b23e","ssdeep":"","tlshash":"22113b9436c9b029231bd420d4afc047e26bfa44455e4574e30af6d17e750bcaa6ab38","first_seen":"2026-04-18T22:55:55.026497Z","last_seen":"2026-08-16T04:53:28.622343Z","times_seen":183,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.765Z","timestamp":1785445873765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":0,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x95d89b41\",\"to\":\"0x01b2c0388d6f9a9ae678ed0c80317c3088a35082\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 5\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":231,"size_decoded":376,"mime_type":"application/json","magic":"JSON text data","md5":"b028d710c1eecb493c5b2d4cb9e79525","sha1":"b0a686f2b8e9a3cd4e495fb22bb456736811b094","sha256":"070a9bdbc81cc7b0a54a2fb68637049c5d60135b9b06161dd5be292c397efb73","sha512":"955a9c06cda960ae57bd8880c41629cf0db15fce41e8063a68b3532bcfa1e792997483e8ce02bd9dea45d4d39dfbc73723a685cfb2fe2da31061692e8ac4dc13","ssdeep":"","tlshash":"46d002c0150b0bb1d5488c21a55971516551bb990dc91d02845d0d441664156570822a","first_seen":"2026-07-30T21:05:37.082485Z","last_seen":"2026-07-30T21:12:28.648686Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.771Z","timestamp":1785445873771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"POST /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"eth_call\",\"params\":[{\"data\":\"0x9619367d\",\"to\":\"0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\naccess-control-allow-origin: https://hoodflip.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json\r\nx-envoy-upstream-service-time: 4\r\nserver: istio-envoy\r\ncontent-encoding: zstd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":103,"size_decoded":379,"mime_type":"application/json","magic":"JSON text data","md5":"a774d305b1fa711e4d3a0775013eedfd","sha1":"3b513cccf47f52d90efb3560560b0c3ea712e7ea","sha256":"cee9e3a9a879b2d1115b3058691428d013699bd3e6ef649fbe696c6bcd34c247","sha512":"99bc487a78cbf686e62156242c89ecfd606f5aafda3e6d9c691b437c35645b203ddd3fa4a339c9028b1e477feb4c81040dacc77da50cfa9c537aa1f0be424b19","ssdeep":"","tlshash":"70b0029015094772d0d94d01a40831806181fb940ec4de52485d1b64114856b7714321","first_seen":"2026-07-30T21:05:37.080762Z","last_seen":"2026-07-30T21:12:28.66105Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/rolldown-runtime-BG2f4sTM.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.469Z","timestamp":1785445873469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/rolldown-runtime-BG2f4sTM.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"rolldown-runtime-BG2f4sTM.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"593de777a5d85807a0a54543b49b190dcd2f0bb7\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: Cpb9CBqoRe6C5qfMozsQ6Q\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lR6Zq7QN6zD0rqrDN7784GusTm%2F6NAC49bYIs3SnRX8Xy8vjr4y%2BfVVnm7udHYOrM%2Bz5i1LCAFzSSHhqc9PrrRTDolQ1QZ9us5PHwilvNi9KKmnNbiWTlamAWj8AFfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac55dfa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1326,"size_decoded":1599,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1326), with no line terminators","md5":"f9e0e9bf8342844a718c1aacdb79c5af","sha1":"e4dddc7d070a10c46c273bcb77c4d44c7d0742c9","sha256":"6cca086e94082e4bf068b37df0975262aae960892417619c2d94b5f27058f428","sha512":"a08126ebe264d2f0f144ba67e7d5e4f2764f3157b226f3ffd0b8d701456eea0f0db2a71fa90ca1badaada2eb7bb5df21a64a4940fc0e3f9b75bc6715ad36ab44","ssdeep":"","tlshash":"462180ef1ad0f2f2224a2381e22c4085e33af43daabc30c0e3688ef165c50c410c8a76","first_seen":"2026-07-13T03:58:41.632294Z","last_seen":"2026-08-16T04:01:51.080839Z","times_seen":110,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.745Z","timestamp":1785445873745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:16 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115257\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T07:28:15.788806Z","times_seen":259796,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":69,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/rainbowWallet-O26YNBMX-CBGCSxd0.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.779Z","timestamp":1785445873779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/rainbowWallet-O26YNBMX-CBGCSxd0.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"rainbowWallet-O26YNBMX-CBGCSxd0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"cdf729f4b192714493d716022d9576ad18b2370a\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: 0jnkoZs3QoG7s7-nPvyhXg\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjEhmPErCK2QJ7qjgNq%2BhUxswLvcBe9efz86kUj5RHU%2B5vQHgSXkAe8jbWjbPGJcpoWm1rfkrKbl1j1Oq29YV1U%2BXYCF1pGhYsGaHg8X1%2F28jMLUz4LIwEfzgCNN5jI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac73e2d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5119,"size_decoded":1895,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5119), with no line terminators","md5":"84081d3948a63252489391b687b075c2","sha1":"b749312e1e3083a73263b7c8f5f8c954e5970b4d","sha256":"d84a29cb2dc25b4f2b31fee3895889f2736907148e99cd31a35e555af9970bff","sha512":"d443183edccd5fa241a05788db7480f7e20be8635c54242d187981248090bf63322d1ddcd835d60ed95a25cf602fd9bbde21f8be8cdb55ec244d5e058d191c49","ssdeep":"96:6z+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+BM:6qpiD470sd93","tlshash":"48b1746d96b96ceedc37e48fdc18670e8020bf17ee0449b1a999db4f1f25818b0e9140","first_seen":"2025-07-12T13:55:10.820908Z","last_seen":"2026-08-16T04:53:28.468626Z","times_seen":102,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/base-QS6CYWIN-Dirz7KkB.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.781Z","timestamp":1785445873781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/base-QS6CYWIN-Dirz7KkB.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-railway-edge: osl1\r\ncontent-disposition: inline; filename=\"base-QS6CYWIN-Dirz7KkB.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: W/\"e2639a15cfd415b2a4e91881d2a72c3f4aa821ec\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: I5LdAPN5Q02lIExno3UVLg\r\ncontent-encoding: gzip\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwOcuavxvbcrdXAa983qYHiFWYthV7vOGbgOAyryWtpoi354y6Lw9N07eMx6UkBZF4rqH03wJrfFfWbqaacwfXSpDClk9ea%2F9GPZJ%2B1z05rWCTaszHlZwYl%2BEWEv2HE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac74e2e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":901,"size_decoded":1263,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (901), with no line terminators","md5":"b7b04e206704fa67bee5e78407068456","sha1":"3fc7bba3d883c364ead488df6e752bd8dcab9c43","sha256":"d423f8e5ac07b46dcd9a67ab93fcb878393ac9d6c6c4f31e5b124afabb6d3165","sha512":"5f020d8208ddb4bc60dcbfd3248c94e2210decb6452125cbe3c81d56f5e0446d278ccc5d180d1e8236a1d16e72a0f911bb25f9560b92289b68cfcc57e4acce33","ssdeep":"","tlshash":"76113dbc953458cab832d52356396789f123ede7bdb114c2e856b703ce05908a54dfb0","first_seen":"2026-05-07T05:24:14.048826Z","last_seen":"2026-08-01T22:09:07.950409Z","times_seen":14,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.792Z","timestamp":1785445873792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":9,"connect":77,"send":0,"wait":33,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.989Z","timestamp":1785445873989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umQuFULS6I9ECPUMp8r18gG5y0VlW4RxgGBeoJeh%2FlxWiPvUypON3%2B%2BTJbF0wf52mNarfYgM%2F8sPjAZ%2F8W7zM2kOziYLmYEvM1A3f75DahXgjsMkisFo41A3VI2otYg%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: xgsBZBAASbm-2mFPH4GxDA\r\npriority: u=4,i=?0\r\nx-hikari-trace: osl1.bgvm\r\nx-railway-edge: osl1\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2375ac87e5776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":760,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=d5e2984dd495a99f5500f4d37e2e1c8e\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:14.107Z","timestamp":1785445874107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /appkit/v1/config?projectId=d5e2984dd495a99f5500f4d37e2e1c8e\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 21:11:14 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 15\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a2375ac96ab50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":362,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1effed41c1c03e882459e0873f7ac611","sha1":"277284ee8d06d2141966c9360a9b1c68d680c818","sha256":"6fa1fe1cd6debd64f7a9f93660a341684169fea401e63a3a11464b66d9de611a","sha512":"1da0d011cd5084c818676ee1db11daa67520b1539d3dba53c90c0a85d278a8c857a853315466c2d8735401d8e084b97d803f15a80084a1f10f0db460db73ba80","ssdeep":"","tlshash":"8f60003c030000000303c033c0000f030c3000c0003c0c300c0cc0f003c00000ccc003","first_seen":"2024-10-06T09:17:07.97198Z","last_seen":"2026-08-15T18:54:46.401399Z","times_seen":134,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":2,"connect":24,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhoodchain.blockscout.com/api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs","fqdn":"robinhoodchain.blockscout.com","domain":"blockscout.com","tld":"com"},"ip":{"addr":"104.26.1.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:29.765Z","timestamp":1785445889765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blockscout.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 16:44:21 GMT","end":"Wed, 02 Sep 2026 16:44:20 GMT"},"fingerprint":{"sha1":"3D:93:BB:4B:22:C5:84:C9:8A:BE:B8:96:23:0B:69:D2:68:FE:0F:73","sha256":"37:73:E2:45:0D:8E:57:B6:D4:FF:65:50:23:E5:72:D9:55:30:51:05:5B:12:29:64:06:FE:C1:B8:11:C5:59:6A"}}},"request":{"raw":"GET /api/v2/addresses/0x2ed2d3bA97e71cB7b6076591fdE4262D1a0a3F8a/logs HTTP/1.1\r\nHost: robinhoodchain.blockscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 30 Jul 2026 21:11:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: bypass-429-option,x-ratelimit-reset,x-ratelimit-limit,x-ratelimit-remaining,api-v2-temp-token\r\nbypass-429-option: temporary_token\r\ncache-control: max-age=0, private, must-revalidate\r\nx-ratelimit-limit: 180\r\nx-ratelimit-remaining: 177\r\nx-ratelimit-reset: 29896\r\nx-request-id: e1928a0ff8ed5f885da0aef4334bc633\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qow5AVs7PKtTrydCYwjItv%2FytvkYQqED%2F7Ip40kctuNvRbVh%2F2HwiCbDN%2B11qOfHrEil1jBZUU6XVGK%2BtF%2B%2FIOfJM90uZGnyDTKoQNFO7AdPK6CLdQDkYTQQDS5%2BXTiFUQl2r6YPRXDJwt%2Bqjzkh\"}]}\r\ncf-ray: a2375b2b1f5a5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102246,"size_decoded":8758,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6221651ea4b796e85ec17096c2f1545a","sha1":"4ebd2e9bd6f8cf853807922aa32c2e750040c26e","sha256":"654bb1c70d3a1de03a0b629f4c6083ed7c560ebaa5fb25e8e28866c1d460ff1e","sha512":"15bbf7f348fabaad6f9f771dfd9da336f5c779dbc1418945d24634a4247586a29277e271491278601f43d0279fc1b767d71f4fdf4e719ddba4e0944ba5370663","ssdeep":"384:R6p66J6K66z6P66L6znT6636Q66l6166K6O66k6166w6B66c6m66k6Og66HH6QrB:UnxwrIrwxiSZ7HRJL0M","tlshash":"c2a3a50014495e7fcacb0a45f6817f06b15f723752cd2c86196e9e7986e60e70a3fb2b","first_seen":"2026-07-30T21:05:37.06465Z","last_seen":"2026-07-30T21:12:28.645363Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8169,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/utils-CGq_Culp.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.700Z","timestamp":1785445873700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/utils-CGq_Culp.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"utils-CGq_Culp.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"7178e1a088637a9e29ebab7a779537cb6d179f52\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: wZ98tEDHRfuZcHGtozsQ6Q\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.sq22\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pv0CrQirXxM8ev6623MtwXPbQ7XSc0BKugHybkMuBWzHg6bLlGC78iBO8TqTHZ%2BuTobxak1BuccDNB%2F%2Bh8vHV0XoG4RoF0zLGX3BFsl2LvTF6L4U9eYV4PMXk5b2Fx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac6ae1c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2169,"size_decoded":1874,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2169), with no line terminators","md5":"44a3f748dc8d4f94159ac87bac04d6ea","sha1":"65ce7cad799f46bbb9f7e6869e33c72a30e826b5","sha256":"ab321b19ade23b97c4ed647c1eafd9c89577966f9fba636700c9a4cccd44ab82","sha512":"f6521a19f41b23d8b5b7c0e34c26839744ce73163285988b682c662e8e62cc821ddce175e105a800fe67aae126b1b2087159394646ca3e1e9fbf4ae011bd9c0e","ssdeep":"","tlshash":"5041108c7b92f072479724b244bb400ef13a8872459c596492449cb2b8f9bbd86dbd5d","first_seen":"2026-05-03T09:05:51.236632Z","last_seen":"2026-08-16T04:53:28.453411Z","times_seen":117,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/assets-Q6ZU7ZJ5-D-Bo-EQf.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.786Z","timestamp":1785445873786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/assets-Q6ZU7ZJ5-D-Bo-EQf.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/assets/index-wmdNlBAa.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"assets-Q6ZU7ZJ5-D-Bo-EQf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"0418e45deb54e38a33c5e62982b5a41ed425af70\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: 3FUtvJbxSjWt6-e7aP71AA\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WEZZRiJT5zLkIuKIzzOkLW2ofgrYYAdob4UMf3abTjwQ6%2BRMeKzpSzfe2ydDlqhG6aW1ELmBAkgXqHyAZioZpY5T80A5xYFHRTuwmU7aqc7ksyMeinhIc4%2B1RLv2ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac74e3276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23618,"size_decoded":5097,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23618), with no line terminators","md5":"c540dc0a9c65e4399a7114b16a08363c","sha1":"669b38f7e81f2f6dd5b15bd5a84404a621aafac5","sha256":"8690341e18e5ea5017731062188baf5077f3bfbe1e64c5d34ceb0eeaad582c4f","sha512":"d34fb05876058f187e3de806ed5ddf6881d2d73d0ea4d9dee6424e35cf631317ab470bf94a3da9310d288587ad2328c6b9e0699a5cab4ea3e574d9bd2c5c8fb8","ssdeep":"384:KpByhqW2xs3dwktSu6foTLEQD4zrlqPqb:KpBSqQ3p8BrlqPqb","tlshash":"8fb278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","first_seen":"2025-07-12T13:55:10.807562Z","last_seen":"2026-08-16T04:53:28.774701Z","times_seen":116,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-mainnet.g.alchemy.com/v2/hENRSa6YHciw7A22MKdm_","fqdn":"robinhood-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"57.129.88.159","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.789Z","timestamp":1785445873789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Jun 2026 09:25:59 GMT","end":"Sat, 19 Sep 2026 09:25:58 GMT"},"fingerprint":{"sha1":"FD:C6:77:5B:B7:D6:22:B7:68:CB:C4:D0:FE:65:8C:72:D8:36:C9:B8","sha256":"BB:C3:BD:94:69:1E:CB:F5:3E:13:EE:4B:08:9E:26:02:BA:61:BE:27:FD:AD:79:94:BC:B5:B0:E8:4D:67:E2:4D"}}},"request":{"raw":"OPTIONS /v2/hENRSa6YHciw7A22MKdm_ HTTP/1.1\r\nHost: robinhood-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hoodflip.xyz/\r\nOrigin: https://hoodflip.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://hoodflip.xyz\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\nvary: Accept-Encoding, Origin\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":380,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T07:31:00.386395Z","times_seen":17914964,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":14,"connect":77,"send":0,"wait":33,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoodflip.xyz/assets/utils-Br0svb7K.js","fqdn":"hoodflip.xyz","domain":"hoodflip.xyz","tld":"xyz"},"ip":{"addr":"104.21.6.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoodflip.xyz/","date":"2026-07-30T21:11:13.949Z","timestamp":1785445873949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoodflip.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 03:56:44 GMT","end":"Thu, 08 Oct 2026 04:54:18 GMT"},"fingerprint":{"sha1":"4F:60:1B:07:C6:A9:A9:7D:58:B9:07:98:6D:2E:65:CF:D9:DA:E8:09","sha256":"49:8B:8A:22:34:5B:63:D3:D3:B9:42:E0:15:75:38:98:A7:FB:BA:E2:0B:EB:CC:9B:8D:4F:F1:CA:F4:E1:0B:B8"}}},"request":{"raw":"GET /assets/utils-Br0svb7K.js HTTP/1.1\r\nHost: hoodflip.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hoodflip.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-disposition: inline; filename=\"utils-Br0svb7K.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 30 Jul 2026 21:11:13 GMT\r\netag: \"7178e1a088637a9e29ebab7a779537cb6d179f52\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-railway-request-id: AE4DFxVbQI2X4kY-woOzXw\r\nx-railway-edge: osl1\r\nx-hikari-trace: osl1.bgvm\r\nage: 383\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbhNXeCA4HBTVkOoGW5Uobje9CIeyaXU%2F1bDy5CmEcgVhtmjgln6Pax2Uh8fUFLw5BCXotKhRMt9VJJeNIxLmtMc%2BLGeo2NDCEKzKFzuzVJhYMCHVygowXBgR%2Fr%2FnBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2375ac83e5476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2169,"size_decoded":1876,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2169), with no line terminators","md5":"44a3f748dc8d4f94159ac87bac04d6ea","sha1":"65ce7cad799f46bbb9f7e6869e33c72a30e826b5","sha256":"ab321b19ade23b97c4ed647c1eafd9c89577966f9fba636700c9a4cccd44ab82","sha512":"f6521a19f41b23d8b5b7c0e34c26839744ce73163285988b682c662e8e62cc821ddce175e105a800fe67aae126b1b2087159394646ca3e1e9fbf4ae011bd9c0e","ssdeep":"","tlshash":"5041108c7b92f072479724b244bb400ef13a8872459c596492449cb2b8f9bbd86dbd5d","first_seen":"2026-05-03T09:05:51.236632Z","last_seen":"2026-08-16T04:53:28.453411Z","times_seen":117,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-30","alert":"Sinkholed","trigger":"hoodflip.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}