{"report_id":"2819f9bc-c69c-4c61-980b-8f66bc988ed6","version":6,"status":"done","tags":[],"date":"2026-05-02T12:39:59Z","url":{"schema":"http","addr":"rabbyextensions.webrpc.app","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":0,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"title":"Rabby Wallet - The game-changing wallet for all EVM chains","dom":{"size":19693,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5051)","md5":"c1ca1b45ea80e19be349b64d81fdf88d","sha1":"17f0617fa143aa7d124bbeb8c0fbc39d794d67e6","sha256":"12376c581010eefd9bc588a40c092e8c28d1dceb60b313cc7ef221fe08330ce5","sha512":"b1e00f0ec3521dc0dfad250c59910b6c68a0cdafdbfdec9d3f395ade14eabf18cb57483aa1a9c5dfb39f35e59b5c60d12767493920110e2d529a96c0f4bcc5b3","ssdeep":"384:d3iNH773qpD3diYI359zslumallWzYgmtyQJ+re+EO:RT0Ya5Vtmall/J+6a","tlshash":"a392e861c2e487a18553e3ddce7233225e3240aff51809093bac1e68bfc7a59c957788","dom_hash":"domhashc4733160b5b4dc856669cbd421a00105","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rabbyextensions.webrpc.app","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":0,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T12:39:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"rabbyextensions.webrpc.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rabbyextensions.webrpc.app","ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":206498,"sent_data":2335,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a1f005bc4813747a377b1cbfb1b88fb","sha1":"73cc7a2e85386e43802426793d39a72159ac2ad1","sha256":"e4aa6a47fdf9a5afdfef6aff77a6b6af7e4a2db5047e43fa49186b0b439e51de","sha512":"ea06e6123154251ccda3aa3f721270c2e812ea6db260519d77acd89dbef40cb9ecb54584a30919e468efe238f62c69205eecb63af53afcc989177b31840c916a","ssdeep":"","tlshash":"da117aaac1b080b4622310f7567f2a54383110eb758188897f1dee0c9f49f4f6b929de","size":910,"data":"","first_seen":"2026-05-02T12:40:03.864426Z","last_seen":"2026-05-02T12:40:03.864426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/b1XW97m5lg5A.css","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rabbyextensions.webrpc.app/","date":"2026-05-02T12:39:38.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rabbyextensions.webrpc.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:43:36 GMT","end":"Thu, 30 Jul 2026 15:43:35 GMT"},"fingerprint":{"sha1":"4F:47:97:A1:E4:63:42:51:18:19:A8:8E:06:01:69:D0:38:D5:5A:4D","sha256":"F2:45:86:45:DD:03:51:59:C9:E6:0E:92:87:4F:6A:56:E4:B7:5C:24:34:C1:0E:34:38:6C:77:8E:02:B2:3A:43"}}},"request":{"raw":"GET /b1XW97m5lg5A.css HTTP/1.1\r\nHost: rabbyextensions.webrpc.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rabbyextensions.webrpc.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 09 May 2026 12:39:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 May 2026 16:54:22 GMT\r\netag: \"ea9-69f4dabe-bd475dce0dd7e301;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1031\r\ndate: Sat, 02 May 2026 12:39:38 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3753,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with CRLF line terminators","md5":"945c9323d3a7def64c9ab77784930184","sha1":"75643a454fd6c9993abca284d631b834a9c5bbd3","sha256":"7e65dbeeb0df257a3adc4ed40109ecbd7f54e1af36f7457198ff188a12e0f155","sha512":"467cb73889c1f696bce3cf2f9f0f3be85a4c084cdfa52b8756f6ac530f130807bd3b8b4247ce331c5c8f2f89bee1c3fcf5ec28eb873f5eeeafb227f7869a79ac","ssdeep":"","tlshash":"85711199e703a141a737cfb6ab954f04e5e910225a031269bfe0c14ce7c892d6b35fcc","first_seen":"2025-02-20T03:57:36.24801Z","last_seen":"2026-05-02T12:40:03.860325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"rabbyextensions.webrpc.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/apple-touch-icon.png","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rabbyextensions.webrpc.app/","date":"2026-05-02T12:39:39.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rabbyextensions.webrpc.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:43:36 GMT","end":"Thu, 30 Jul 2026 15:43:35 GMT"},"fingerprint":{"sha1":"4F:47:97:A1:E4:63:42:51:18:19:A8:8E:06:01:69:D0:38:D5:5A:4D","sha256":"F2:45:86:45:DD:03:51:59:C9:E6:0E:92:87:4F:6A:56:E4:B7:5C:24:34:C1:0E:34:38:6C:77:8E:02:B2:3A:43"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rabbyextensions.webrpc.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rabbyextensions.webrpc.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 09 May 2026 12:39:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 01 May 2026 16:54:22 GMT\r\netag: \"10ef-69f4dabe-e5bb930e0108fff1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4335\r\ndate: Sat, 02 May 2026 12:39:39 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"aa4b7f4d1cbc12e020da97ba9f9ccc14","sha1":"f30efacd27a51c63b879272c83d77f4ca2747d10","sha256":"3079d8ef92c7f8442c147d77bd30feb100a355588284e8f412c2542c08cb4981","sha512":"9b08e9991775be49c6a8ca9cb5adaca5ade35d2ef44872743b8d3e1b3ae19ce483fea0b4c668bee2cb6188e76c55592b3b9acba2e5fe7742a12e741ae3b63c73","ssdeep":"96:uqyBBi6PVvSaiH2FGjw7qpzPod0+tlVvmjhjc+HscobvzRWJD+:uqyB5TiWkjcd1vme++zRWJD+","tlshash":"2b918f0b5754fce408d21414da8f72c0785909b3ee3b07a02a5298eddc6c57deb4bbc6","first_seen":"2026-05-02T12:40:03.861634Z","last_seen":"2026-05-02T12:40:03.861634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"rabbyextensions.webrpc.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/favicon.ico","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rabbyextensions.webrpc.app/","date":"2026-05-02T12:39:39.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rabbyextensions.webrpc.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:43:36 GMT","end":"Thu, 30 Jul 2026 15:43:35 GMT"},"fingerprint":{"sha1":"4F:47:97:A1:E4:63:42:51:18:19:A8:8E:06:01:69:D0:38:D5:5A:4D","sha256":"F2:45:86:45:DD:03:51:59:C9:E6:0E:92:87:4F:6A:56:E4:B7:5C:24:34:C1:0E:34:38:6C:77:8E:02:B2:3A:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rabbyextensions.webrpc.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rabbyextensions.webrpc.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 09 May 2026 12:39:39 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 01 May 2026 16:54:22 GMT\r\netag: \"29fae-69f4dabe-822450ba42aaf4a2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20136\r\ndate: Sat, 02 May 2026 12:39:39 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":171950,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"835427169063d52fa2928a9286503c22","sha1":"eab9d946433724647e12c16dd6ce636038df3663","sha256":"92ff3f848e59acfbede7dfeb9914d23e8dde07f43247da6948e7fadae904ebb7","sha512":"b9ef9d40e1965b5788edccdc6184e8a36339aa25da4ea5f7e20ecb9019bb59d239bdd35a265deb04d82e066f6846a89098bc438a6a34fa58103ef1e86517dfeb","ssdeep":"768:frWr/2YeQJ2dZfPsU9xjjrtpvmKALrclVh8qsO:fAdeQmZfPzJ/nvmKALcSqsO","tlshash":"edf394d3d68025f0e7e893313c6b0d6916a36e3aefb4725d1813f2b017779a2126691b","first_seen":"2026-05-02T12:40:03.862595Z","last_seen":"2026-05-02T12:40:03.862595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"rabbyextensions.webrpc.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T12:39:38.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rabbyextensions.webrpc.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:43:36 GMT","end":"Thu, 30 Jul 2026 15:43:35 GMT"},"fingerprint":{"sha1":"4F:47:97:A1:E4:63:42:51:18:19:A8:8E:06:01:69:D0:38:D5:5A:4D","sha256":"F2:45:86:45:DD:03:51:59:C9:E6:0E:92:87:4F:6A:56:E4:B7:5C:24:34:C1:0E:34:38:6C:77:8E:02:B2:3A:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rabbyextensions.webrpc.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 01 May 2026 16:54:22 GMT\r\netag: \"4cf4-69f4dabe-6ca3efec13690701;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5803\r\ndate: Sat, 02 May 2026 12:39:38 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":19700,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5051)","md5":"61490f4621ee9c10e47922c5130786f7","sha1":"cb843b5f8853c4496b53735b0840b98f7ea818b3","sha256":"1ce645fff7a8e8c21b6c68f2f6bd74754141b0c6e995e6dda064619d2e05be8b","sha512":"c50375b952e4aceade8b04c69bc5c45cdd347c43048d5bc30b06d76b08ecfb8ab7a1f06d1b702085093f7a7edc58b957ef89e0b151054a131aaa6276691e4307","ssdeep":"384:R3iNH773qpD3diYT3u9zslumallWzYgmtyJJ+re+EK:9T0YjuVtmall+J+6W","tlshash":"fe92e961c2e487a58653e3ddce7233225e3241bff51809093bac1e68bfc7a59c957788","first_seen":"2026-05-02T12:40:03.863565Z","last_seen":"2026-05-02T12:40:03.863565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":317,"dns":6,"connect":146,"send":0,"wait":285,"receive":4,"ssl":160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"rabbyextensions.webrpc.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rabbyextensions.webrpc.app/logo.png","fqdn":"rabbyextensions.webrpc.app","domain":"webrpc.app","tld":"app"},"ip":{"addr":"217.21.76.19","port":443,"asn":47583,"as":"Hostinger International Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rabbyextensions.webrpc.app/","date":"2026-05-02T12:39:38.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rabbyextensions.webrpc.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 15:43:36 GMT","end":"Thu, 30 Jul 2026 15:43:35 GMT"},"fingerprint":{"sha1":"4F:47:97:A1:E4:63:42:51:18:19:A8:8E:06:01:69:D0:38:D5:5A:4D","sha256":"F2:45:86:45:DD:03:51:59:C9:E6:0E:92:87:4F:6A:56:E4:B7:5C:24:34:C1:0E:34:38:6C:77:8E:02:B2:3A:43"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: rabbyextensions.webrpc.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rabbyextensions.webrpc.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 09 May 2026 12:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 01 May 2026 16:54:22 GMT\r\netag: \"10ef-69f4dabe-93ee8ec0e19ca5e6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4335\r\ndate: Sat, 02 May 2026 12:39:38 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"aa4b7f4d1cbc12e020da97ba9f9ccc14","sha1":"f30efacd27a51c63b879272c83d77f4ca2747d10","sha256":"3079d8ef92c7f8442c147d77bd30feb100a355588284e8f412c2542c08cb4981","sha512":"9b08e9991775be49c6a8ca9cb5adaca5ade35d2ef44872743b8d3e1b3ae19ce483fea0b4c668bee2cb6188e76c55592b3b9acba2e5fe7742a12e741ae3b63c73","ssdeep":"96:uqyBBi6PVvSaiH2FGjw7qpzPod0+tlVvmjhjc+HscobvzRWJD+:uqyB5TiWkjcd1vme++zRWJD+","tlshash":"2b918f0b5754fce408d21414da8f72c0785909b3ee3b07a02a5298eddc6c57deb4bbc6","first_seen":"2026-05-02T12:40:03.861634Z","last_seen":"2026-05-02T12:40:03.861634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"rabbyextensions.webrpc.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}