{"report_id":"36953107-821b-47cd-8e57-a2195d78fb1b","version":0,"status":"done","tags":[],"date":"2026-09-02T20:53:02Z","url":{"schema":"http","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"title":"cashflowxx | AI Trading Platform | Official Website","dom":{"size":139705,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13472)","md5":"493f1ff4e30f725d69e38012df686e0c","sha1":"7e6c7a565158ae17149339b1a1adb01c6caf5bec","sha256":"999e2aa5a224ffc2381b895e998dc6c7ef0ee498b2e1349eb118a2f8c6d31d83","sha512":"cdfe1bc71a52dc5459e7a815cc708104225c5047604a42426927d2f60ad2ea5bf2b7435463d2e61a59f34af33e1cc7a1b1ffe53f48687a9e3395ee85d1a626c2","ssdeep":"1536:8v+JxX0/CFT1T5wDdr7sOy2+UBH4c1IRPCikFKZzwMylwOACOw3v2PuM6RIRJB:8v+DXPTpWJhID1TdC4PuMlj","tlshash":"26d34c2185cf107f1d2241cb754b331b6298c1eeffa1a4c9b56cf52c1bc5fa29528b9a","dom_hash":"domhasheafbbca2a34a8b2ed195c563e96938fe","first_seen":"2026-09-02T20:35:44.347903Z","last_seen":"2026-09-02T20:53:04.963724Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T20:53:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cashflowxx.click","ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T20:35:39.582966Z","last_seen":"2026-09-02T20:35:39.582966Z","alert_count":70,"request_count":14,"received_data":271996,"sent_data":7685,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":5,"received_data":324250,"sent_data":2658,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":6176,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":1,"received_data":55968,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-02-26T11:11:38.239945Z","last_seen":"2026-08-27T21:58:08.724182Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":932,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","size":55174,"data":"","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-09-03T19:32:41.404581Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T23:34:29.508684Z","times_seen":127177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0abc945169649a8755ed8b3457049185","sha1":"05c763d704f34daa38c5d365b9a886eb056874a1","sha256":"f1cf82ef8ce5deb3fa3b2e8613ac356bbbbd8470f921956c940c1bb9590284de","sha512":"675195012e901c3d68031f8f986d81469a11e0cd77bf8eca022b438650b1f341659ba0fe56fd4f94ad7f7bec17b57f4de554d4033de6d6a5224b6354122e0d8d","ssdeep":"","tlshash":"71d0a75de620a76616f29130522ffb1259b341d70d409950491ade40ea38f8e92368ef","size":223,"data":"","first_seen":"2026-03-27T21:45:01.945196Z","last_seen":"2026-09-03T19:25:38.728928Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58831d1e62fe810505d7beebf26e8a25","sha1":"ca6210e27ea2a721dde7cecb4378712dacac8581","sha256":"7a923300adcce6174841c53483774d990afde64369c390c3f628d6b3cd7de53c","sha512":"39249dacf5533e96603e7d0623e7671e3f29fed91fdc873cbad8de571414808def11608d34af267d1f292286484dce65086590786cb22f7b252ca62ab294f53f","ssdeep":"768:FsWL6tEaCikFKZ/7IH3tt38F7/qJeQgNOGo03svughfwBcwhuZVhqCOw3rWBDHs9:uPCikFKZzwMylwOACOw3v2Pu5","tlshash":"d363e725c9df549b0e2011cb688f3b2b539cc1fcffe1a9da8548f81c11d9762a51ce9a","size":70371,"data":"","first_seen":"2026-03-27T21:45:01.947507Z","last_seen":"2026-09-03T19:25:38.730321Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32cd080c4a96bb1f73a3f51b16b01ad8","sha1":"f38a6d8b73ebfc0c8943f8af000142fe14588af1","sha256":"796702b002af7d862f0823b6cfc9aefcd1d39b499da9ec875d20964d702374ed","sha512":"bfb033e9eb156dcd31d039a9559ca1a10aa9102701b48bd3b0fa37de1dc340400f4c34976136b87f7ec004c18fcc1fab5d4d9ad8d276814c665d7215f88595ca","ssdeep":"192:bvBb4FLwLd4gaZJSHBscgXaHds+GDYoI3P0etYTaSIc9BeM9Lz1EBMJQDafaKggg:KdxMC+GDGRYTcceMVy7DIRjuuM","tlshash":"7252c7aa743b097d28bb016f7fde6340a670008fb942e844bd1c75243f98f865a797e5","size":14477,"data":"","first_seen":"2026-09-02T20:35:44.393016Z","last_seen":"2026-09-02T20:53:04.977432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7366785ea9e8a78249e9a62d0d386161","sha1":"b59775bb3eea11b75324b5edd67f4014c2e4ec0e","sha256":"6de6c3f79224b694405a14ea853029fdf4e946133a59349ad952d327611a4ccc","sha512":"79956ac97c6241d7f307a456f7fd02bcf35cf59837bc69226c6176281a6a566f5903eaea07619e340563c562c0768dba264b220c1cd24635921a6e1bb8f13cdb","ssdeep":"","tlshash":"8dc04c2096249edd9163c2601f5b2b419245d92b2831b690a7b09ea97a0359b49d889a","size":143,"data":"","first_seen":"2026-09-02T20:35:44.39539Z","last_seen":"2026-09-02T20:53:04.978176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-03T23:34:29.640619Z","times_seen":360992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"71801e55ca55a11b6e9f86fbdf7b9602","sha1":"2434a5164db41cd5bbcf79dc10bc5fcfe97c66b3","sha256":"2437488f1da62b543e625583e02e3e043feac626b3370f44f636eb7f657f7f64","sha512":"5a514f43b8d52876627707bd650dbfe172c99780bb06b19d90cf191805cabead39ec355e87ef62416ac64a0fd5f6536e2307a2975c0a4aa2b5f4a271d5c5cb26","ssdeep":"","tlshash":"7ba022c808cc30bc038a8200023223222320a088c8000080c2000800380808be0b2b82","size":64,"data":"","first_seen":"2026-09-02T20:35:44.388545Z","last_seen":"2026-09-02T20:53:04.979501Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd51bf58e18b1db566ad93f19e506c7","sha1":"906ba56d8a88a8505369ff5549f2498ae88b859c","sha256":"9345d27493504c8c9bbd19e5e0aba16099cfa6903089479811ad93ad99bdd543","sha512":"8faed9bc6f1ebac530c5e3ef10c8f2f96cf5c96030cf85bbfb2dd63abd98f60d170c03a1c392458882bac2d8a6113faceb9c516ff0e40e7c86403be22eb6c8f9","ssdeep":"","tlshash":"c860003030003cc3c00c0000c0000030c030c030c0003c000c00000fc3300c00000030","size":14,"data":"","first_seen":"2026-03-05T09:10:23.48722Z","last_seen":"2026-09-03T19:25:38.72475Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cashflowxx.click/styles.css","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.024Z","timestamp":1788382353024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-ray: a34f662a6d431ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"f7470c2ebfef483bab038527ffdbb844\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPRGFSBcF7QkiLdFOFX2hLsSbWmq1YUJcvXHhaur4G0kG0c7EVwSQlmz9DPAbI7wJH%2FFw7ocJuMmyeA9tJJEKDR7MiTYSgvNyWlo0rbFlzAl3CBsCAKM9tLaGWTfbnKfhKi%2F\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23862,"size_decoded":6288,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23862), with no line terminators","md5":"f9097f70d1322eb7a256a2756722b61f","sha1":"e166f9302640ac9dba529b1725da81305ce36b9a","sha256":"e168b4ea38383ee1712838721542d8f0ed64501d53c5a8198695cc2dc66d8ac4","sha512":"589159cac845825f6a351973166cf504a9e8c0f6079e33d8bea06bf86896a815a7a8ed541c13fe1ee65151d80aabb823bf3a09282f6a44206e12347b67b51aa3","ssdeep":"384:FQiz7pvai1rYmkawFsE+i3pK4h9Ge+WbYTGXqbxQpuC0/0hn:ZJwawFsE93pnrbY87sL/in","tlshash":"8fb2b761a201223df02bc5a6e9d1a38f7134d512e72303adda77a275dfc61eb4b35a0c","first_seen":"2026-04-30T04:57:36.9178Z","last_seen":"2026-09-02T20:53:04.964562Z","times_seen":5,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.033Z","timestamp":1788382353033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14629\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2293215\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWSSEw7XhN5ie1etV9NkGf9ymRtZHWqNm7Doja7FWIxcSpNrCiReRDyjM5Unt2LdYqNg7Yct%2FnpdBzgju1Xn%2BynnRR961EkENFrjjgCmN8%2BrruWycDRW429IY97yECCwOWMUk%2Bzn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f662a7be71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80795,"size_decoded":15636,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-03T19:32:41.40059Z","times_seen":2481,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.178Z","timestamp":1788382353178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 20:52:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxGC7MMIUIgPlJqw%2FA%2FnhUl%2Bk0ZWwDOJAJpFwzRJZHoeikYDPPjO37vYOAw3ITIPfCostY5hU6REAi3zAfo0Thfhc4wbIwLB7hgvy3kEsoR7FhFX%2FG7qP9arOupVS3kg3uin\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\nserver: cloudflare\r\ncf-ray: a34f662b6d581ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T23:34:29.508684Z","times_seen":127177,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.267Z","timestamp":1788382353267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cashflowxx.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1440911\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0BDZavFXJOYjHvuCP6Xye8esDoE2hfaMSSuyJXN8%2B2j6qnjf7XqugmunnVMUYLPoaz8w%2FRHjeXAmmU2Dm1mMNpV3V9qzQxyGMHoLA2j85zJGyZd0gcQjBmYjbMpVLJKRwLeF7%2FD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f662be8d01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":157496,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-03T23:35:12.732955Z","times_seen":51512,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;500;600;700\u0026family=Space+Grotesk:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.026Z","timestamp":1788382353026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;500;600;700\u0026family=Space+Grotesk:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 02 Sep 2026 20:52:33 GMT\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5492,"size_decoded":1268,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d25962f277e175069b5fa8d7bbfb1157","sha1":"3f5c469e1ac2da960923f9611b35fae15d48ffdd","sha256":"39f1200901fff72ef2cbe811b5fe1d3465f415cbac5bed01bdc39e5cd8abbbe7","sha512":"b0ce95f1f6f26306dc52769795fb7bd1b1ddbf6b0c63ce96b0e548be7523fdffebe316adb0982745af4e52d60e90d7922ad0db7273cf33a85bf8a0b08083d6e0","ssdeep":"96:OOEagONbOXagONbOxMagONbOpagONDNQOEaHQOEaGJc+uhQOEafNDNQOxMaHQOx7:pgwgpg6gax/GiZfRG4ZYiG/W","tlshash":"feb102820467e600eb635cc222cd7e36fe4fa1546450da386ffe18d8ed9ad321315b2d","first_seen":"2026-03-16T10:38:17.666214Z","last_seen":"2026-09-03T19:06:00.526665Z","times_seen":13,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":44,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.035Z","timestamp":1788382353035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 288\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2387186\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5X1XXw7QE82yIYqcqMXyPKKZOdNU323OrwoOtp%2FSRRR3w16dOOupxO%2FMDprhWTjnO4rsnrDO2dXngPAwVvdY3irnfICfQC8%2BGiUEvgXYBBlcIfBKIFrqyUew0j9DIm6GoPxgKoWZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f662a7bf01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-03T19:32:41.401147Z","times_seen":604,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/terms-popup-mobile.svg","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.048Z","timestamp":1788382353048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /terms-popup-mobile.svg HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a34f662a9d4a1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"7690b6f86908892a962d56db968761b5\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8AlJ2JBDQ4Yj30w%2BXxBiHHXopgqMF2gyKs9vMBrj04Phia2%2FzAOknhDm14yCPrMPhvJy1Fr8w8MMwY2UbmspoUDmoSurLuye2pkTDelVGQLdFq66rFsrOzy9E%2Fz9vC0vkNC\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3645,"size_decoded":1897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b8d890a26cd99b4641efb1afad168bf","sha1":"45d1d31a12fbadf40d6f9e1d5129a337f4727aa4","sha256":"5ac5cb390c156da9ff9b87b5c41b78deb51a657136ec4afca9df0562148ab837","sha512":"f5fa10326600b0e5ba0d7effa6f831ec48e5fa031c88496e0c288e5d8c3ecab7d4458a2168c8e9b575b846cec48bda9288fff6a4866113b93d03d7e87ee1b9bc","ssdeep":"","tlshash":"55719bd1d3ca072df24dcb69c345a3bfa7a1d55cf25ac15449e6820a9fc3c4685cb0ca","first_seen":"2026-09-02T20:35:44.382244Z","last_seen":"2026-09-02T20:53:04.968925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.096Z","timestamp":1788382353096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 20:52:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5K%2Bk%2BzW75cLOeWo6v%2BqfRAtYd4T%2FFgVN5bXvAWtGXQiKSPkcz%2BEKFuoeyatkStabjYK7PL3h9XfWFph4emHy3OuPB87R1nU1FaNjsfc8EWLRFsOJ3%2BGMTZxxO%2ByHrkiWF3LW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\nserver: cloudflare\r\ncf-ray: a34f662afd521ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4567,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T23:34:29.508684Z","times_seen":127177,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.156Z","timestamp":1788382353156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 20:52:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K06PNjfptYGNT4ysmaKnccnCZ1EoQ%2Fd0bxAEElPMyyNBjsIbnY%2BfeS9pgek62j%2FL%2BBJx8gqFr97qCL2%2FSAM604Pw1iYSkAIXDbFDbhJ4RV%2BCUnFvnWkavo%2FVGpkJ0pPyH1a8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\nserver: cloudflare\r\ncf-ray: a34f662b3d531ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4567,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T23:34:29.508684Z","times_seen":127177,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.204Z","timestamp":1788382353204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 20:52:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zCio9jmMJvpKtvFiY4g3s5rvbnqNtqj4F39kuBHUrIjDw9BwS7c7GkPBaNG3IHWjSYrwwZekAgXXij271qHTfIpkQXg8MOJKvqcExAvAT2QIQ3%2FOXn4A88bWIY3MgTg91b4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\nserver: cloudflare\r\ncf-ray: a34f662b8d5b1ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T23:34:29.508684Z","times_seen":127177,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.266Z","timestamp":1788382353266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNw2faIYp%2BNCDrTytbq7uky7O2Qpay1MOjojr3RTCbtWy1E97pa73%2F4jd6Per%2Fcg0yYWmgg4P5CPfmg7T7IyOUdS9c0645gkUbbH6UQx1mb7S3XbhvgHphMEXrLoch%2BahHQf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f662bed601ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11800,"size_decoded":12401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-09-03T19:11:39.046846Z","times_seen":8461,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.313Z","timestamp":1788382353313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FD6R3D2WDDU3Ce45QgOKp1bNBl5zncEBrqiCSkQvoNY2ZRCBi2ExuF%2Bx6%2FjNXO4Ur0nWtyQvJ7siNV9f7jojULgHSlOls%2BuGMUanmjaWj4U1FR%2BfWpQ4nok%2B7lw3kvdN9We\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f662c3d651ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11800,"size_decoded":12405,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-09-03T19:11:39.046846Z","times_seen":8461,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:52:32.519Z","timestamp":1788382352519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\npriority: u=0,i\r\ndate: Wed, 02 Sep 2026 20:52:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a34f6627cd251ae6-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=192, s-maxage=3484, stale-while-revalidate=67135\r\nlink: \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css\u003e; rel=preload; as=style; crossorigin, \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\u003e; rel=preload; as=style; crossorigin\r\nserver: cloudflare\r\nset-cookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F; Path=/; Max-Age=2592000; SameSite=Lax; Secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: accept-encoding\r\ncontent-security-policy: style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob:; frame-ancestors 'self'; connect-src 'self' https://cloudflareinsights.com; default-src 'self'\r\ncross-origin-opener-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zS%2BQzBdGNQmqzdPC6kk41i7t8gqALPSG56Q5VUCvjGzTn3uhYvxybWrLOATA8%2Bw%2FDXuHXYV8e5zO%2BCpnPFAke7sgw9i9Yr%2BNl9yIpU8RSgLfx7UrOt7AY2EZa2Rb6YEX9Zu\"}]}\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"entry_url","value":"https%3A%2F%2Fcashflowxx.click%2F","quoted":false,"path":"/","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"entry_url=https%3A%2F%2Fcashflowxx.click%2F; Path=/; Max-Age=2592000; SameSite=Lax; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139757,"size_decoded":42123,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13040)","md5":"8cd252a4f5a81080df48057b2dcfe462","sha1":"0a6ce02390c540ed063f415ce3e0c9a594ffd21b","sha256":"ed4ad2876403d40136cab4fa36c80e7f2b09edb8abbf902f179b3ac61b3bcc76","sha512":"15d757d23e80be3ef40ce6b2b8aaf43e75fee0d0e234c5e9467744c0a5d560c0716a7001ed2bbe951bb9a3d94418db10e4944797920b09d808de3bdc6cac1cee","ssdeep":"1536:Yv+JxX0/COTd8RwDEyZHOZ2+UBH4GTPCikFKZzwMylwOACOw3v2PuM6RIRH2:Yv+DXATquYGh1TdC4PuMlW","tlshash":"9fd34c2195cf107b1d2241cb754b331b6298c1eeffa1a4c9b16cf52c1bc5fa29538b9a","first_seen":"2026-09-02T20:53:04.970163Z","last_seen":"2026-09-02T20:53:04.970163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":57,"connect":20,"send":0,"wait":34,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:32.819Z","timestamp":1788382352819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nOrigin: https://cashflowxx.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:52:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 288\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2387186\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOtPIntMoacgYj3qi7soExYgKmtiwEmJucrZ0VGP4jirQPcHwZIet3k46hT8%2BgFwugShiArwOb4z2SQ5RLmaC4EL4x%2Fm4471NbU%2BNJXJ3zMngT0EnjS%2F8PYRItUKqMIAOJ72U699\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f66293fe71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1293,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-03T19:32:41.401147Z","times_seen":604,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.028Z","timestamp":1788382353028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 20:52:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9w%2FeSdYq%2F5b6tlXhRA5vSvbk89ch1m1NFp4L%2Bzf7pHIQPe5vpjtMjRKxxMu2M5OUsZwt3wciNgL4ZdAUFsSqOMx9G0aGGdeJi%2BRgxddUtjKOo593jcJJGH5ohxob7Sb1ZAZX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\nserver: cloudflare\r\ncf-ray: a34f662a7d441ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-03T23:34:29.508684Z","times_seen":127177,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.037Z","timestamp":1788382353037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/clientjs@0.2.1/dist/client.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.1\r\nx-jsd-version-type: version\r\netag: W/\"d786-tFl3gn9sluDNybc8SJd26oFVmTg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1373891\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\nx-served-by: cache-fra-eddf8230144-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55174,"size_decoded":22004,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45676)","md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-09-03T19:32:41.404581Z","times_seen":377,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/terms-popup.svg","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.045Z","timestamp":1788382353045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /terms-popup.svg HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a34f662a8d491ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"00dc6e50d4f767ea6b1488dd026c3245\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRZzfNCCaD3J2X9IhSArmxBI%2FHnKWK65kiR6pMoJOQa8I4P7X2Kcy5q3GzhXrJlvDfLldDA7X%2FHQOCpyCg8%2BjRGVIlfC9S%2F6v4YPNlWiw3YJGR5%2Bg%2F3RNpYXE5%2FXE2uWz708\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3087,"size_decoded":1901,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8597e35035ef7f200173343068096f8d","sha1":"72661a7cbde5ab4f1a42d1a304100f3d8f10fdca","sha256":"187f1cb4d7e585bf113a57e5bfe7eac9b6ba8e7f0de237efe757cec04b4cd60e","sha512":"2564d0fba68ebac355a3d8789a1a2861a489fd29820e6d7dc727d4a68fe794b0361e2b5e5cb152d69e098a28eda238d549ded38a6dd552d324b9ddcd8d0db394","ssdeep":"","tlshash":"a2513192c1ca0b2ef7498b85c346a7fba7b1c55cf39ac2a40de5024927c3c0685eb1d9","first_seen":"2026-09-02T20:35:44.358817Z","last_seen":"2026-09-02T20:53:04.972024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/disclaimer-popup.svg","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.217Z","timestamp":1788382353217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /disclaimer-popup.svg HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a34f662bad5d1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"a008c0dd0f0d7f7ff298e6dbbb9659b8\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=go9LxCDiU%2BBjZBnupGo%2FYFXWx4faika6%2BCuGTCcX%2Bh5mB0HUAEhpl157OJK4nvVsj7AFW%2FJw6jUbXTjj%2F9s2vCvaLX56s36tk19Ygk0oaiYePhSAwle8jtTOSALmH%2Fhg1VAH\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":1687,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06591a4db7a04c239d641b8d4a18466d","sha1":"8e4caf4604a8d51d4bb768e23a18f51906f2dd81","sha256":"ce2e195486becb1d33205a66b1a6025346265b9c02d5a9c17445d7d16ec18d1c","sha512":"9c23070d9e077caff5ad602368898e8ac472089f75885a35bb8d9e7298dba6bf51d1a33f1ec8f648830ea9796a5e7d1786545d66b26f83dc679527df80d9015a","ssdeep":"","tlshash":"964125aad1cd0a26f686c048e5e6bbd7b3f5d09da348c1951cd4002c9fd3c4ac5d76e9","first_seen":"2026-09-02T20:35:44.369256Z","last_seen":"2026-09-02T20:53:04.97263Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/favicon.svg","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.355Z","timestamp":1788382353355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncf-ray: a34f662c7d671ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"4b07775696d52bc99fbbe96b3380bc9f\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cfitaRiv4IJWoJ8DLTpFYqR%2Bu6sF5ffG1xcPMXBViIIEutGOYyVvMpQC8v4pkee71Ee3N4u9twl%2BxTtnT3s3i%2BNsTNuWyIXfJyrMM4Xp221tslxJDzJMjHvyVABO7miDFFhh\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3aec104d05eb80c4d32828004058c5f6","sha1":"c50b7a971ae84efb73ebbdbcb5939fdbc6615cc9","sha256":"ad0b89d4c2a2773744a4583e6a2eadb266d119dddbed381adf1736a77b048927","sha512":"07bf3fcdee42f4658809ff901966879ff1dcca6b676afbf5deba0b84380bc9cce812d895b31b48adfd3951a56f9c8f61df0e1f98d07ccc0ff4febb9d64a328b8","ssdeep":"","tlshash":"34f0972252c90809cb348281fb46ba92da79d086c101c8a0fed92c179b5dc9228d736c","first_seen":"2026-03-16T10:38:17.673728Z","last_seen":"2026-09-03T19:06:00.541861Z","times_seen":13,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:32.817Z","timestamp":1788382352817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nOrigin: https://cashflowxx.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:52:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14629\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2293215\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pkyd9avyZ%2FLHFjg0dxAtPE1Zks7qWg%2Bz8urngSzmB0lRzf1Rn0XdH5YTT86KBA7kweRxkHYvKse7m%2BeKfmWN9Vhru2JDDGbq917CAlvazCKHlGFWDkoCleLuLIkIhfhSsGcd7lwc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f66293fde1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80795,"size_decoded":15634,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-03T19:32:41.40059Z","times_seen":2481,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.038Z","timestamp":1788382353038,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T23:47:52.933414Z","times_seen":18264659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashflowxx.click/disclaimer-popup-mobile.svg","fqdn":"cashflowxx.click","domain":"cashflowxx.click","tld":"click"},"ip":{"addr":"172.67.131.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.219Z","timestamp":1788382353219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashflowxx.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:17:34 GMT","end":"Tue, 03 Nov 2026 15:17:24 GMT"},"fingerprint":{"sha1":"CC:36:7E:F6:ED:95:7E:01:B4:F6:FE:4F:C2:67:74:01:67:66:20:74","sha256":"FC:4A:66:AC:FA:10:4E:42:3E:B1:74:81:41:46:99:9F:33:9F:35:B2:06:A1:FF:83:22:31:CE:45:1E:C7:9E:24"}}},"request":{"raw":"GET /disclaimer-popup-mobile.svg HTTP/1.1\r\nHost: cashflowxx.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashflowxx.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fcashflowxx.click%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Wed, 02 Sep 2026 20:52:33 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a34f662bad5e1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"2b9268cc27ee2572c09da0c5d0c418e9\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ov54J3kGRS0YYm5hUsrdBLJR8EbM4d4ggU%2Bk6Atdf3WYX4UkHY5%2B%2FTfZzLDOH9b%2BbDCaATFrcjJx8rgyOc%2FwXjhcXtI%2BY0%2BeIyAfH0DNaiNDUPAqgnbYbj5iwIhZnthan9mH\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2871,"size_decoded":1696,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da611c6ee4694a7531d51a8b9383ec1d","sha1":"92e321bf494e074fee7ae0b4c047039f841fd037","sha256":"502e0f5b4109394612bae7173f0ec7a72c8dc1de91a7911f3cfa6a0059dacb7a","sha512":"d797509e7444bd3b94e27cbeee9ac68972083e107ded561188fc5b9a204964757a9fd8bfe43c759ed5289c5640ba94b0c78ec7e15607914c6f1e3fc3a3a30e03","ssdeep":"","tlshash":"e0518bd6a2c80b3de24dcb68c359b3bba6e6d55ce756d1744ce1060adf83c8685cb0c9","first_seen":"2026-09-02T20:35:44.373756Z","last_seen":"2026-09-02T20:53:04.974516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"cashflowxx.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"cashflowxx.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashflowxx.click/","date":"2026-09-02T20:52:33.220Z","timestamp":1788382353220,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashflowxx.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T23:47:52.933414Z","times_seen":18264659,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}