{"report_id":"8c77b7f0-fd4b-4a71-8648-4849609fe467","version":6,"status":"done","tags":[],"date":"2025-12-31T12:25:49Z","url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"title":"Pump fun x Padre | Official Partnership Program","dom":{"size":21362,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11681)","md5":"139e1dacfaf98e1e9abb2fe00212b578","sha1":"336b93f0bd1015e6ea509a8a9890bb6c92aacdfb","sha256":"56ec04dc03b27b5ba38a0b454cea473b735c5d0fe245f98de29ddb76d1ed1662","sha512":"aad60168cd9af1295d330cd97257332d162aacea3a7bd3b7dc936aa0915b55a4198cb410d65495913fb0d9344962ac4a34b936a55749095cb0118193ee232589","ssdeep":"384:+6T/hL7iHY//W+WbQHdeyMnUhLJnTc3+dH05j5C5Tju:BT/hni42+WbQ9VvhLJTc38HI","tlshash":"2da2e82c7354002e6c53c1eaead1f62db62d61c3df2a86e9f28d41109fc6af69d57608","dom_hash":"domhashcdbaecd062f63a9e5b1f80a44fdc257e","first_seen":"2025-12-31T12:25:53.551647Z","last_seen":"2025-12-31T12:25:53.551647Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T12:25:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cashback.tradepadre.io","ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-28","domain_rank":0,"first_seen":"2025-12-31T12:25:50.546413Z","last_seen":"2025-12-31T12:25:50.546413Z","alert_count":12,"request_count":6,"received_data":1070155,"sent_data":2906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-12-28T22:53:28.510747Z","alert_count":0,"request_count":2,"received_data":153500,"sent_data":863,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-12-29T01:21:43.190502Z","alert_count":0,"request_count":2,"received_data":815971,"sent_data":836,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":1,"received_data":76822,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e34f04e4995865c794cfd963821e15b","sha1":"1d9b6a91e2e834b1ffadf810cf32ad39a77e3d26","sha256":"3ba1c979feab29d4c3dbc212e5c733cf9f4d10cc1796ac8a592260579ef959fb","sha512":"03afd206f48cff70e9246bb59b620767f78ea687ed9b37f2ce18407b7062895344f125bdf42379917dbebc21797717b0f5baecff07bd7e53368dffc4ff309060","ssdeep":"","tlshash":"e5e0cd1573b604325563f53506ef6645241210074446cc28babc97492f50b9071f9bd6","size":357,"data":"","first_seen":"2025-12-17T03:39:09.11462Z","last_seen":"2026-03-22T22:50:15.605592Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/feather-icons","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b574a076a30ee3f8d842fd355e460344","sha1":"5ffa4ae06c1d33a91392867becd4e85af8426c68","sha256":"ea465ac6b69a037dc49fda6ab1c585f95725091eff4515df61db91d9d3c5e54e","sha512":"ccc9bbf9943c019af5af75bc67c943013907d39406e469b6c5ce8c96c09d073f65ea813c63b2170723204a6feb75142b86e1edf7d1c061f3258c138467af2ae4","ssdeep":"768:xBsdL1Xq52ecoxdaQfnalvNsojRu9J0zNcHqLExvi/9TkJ0qqvzpO5tGwNcpJzRK:xBE2fnFAycpJc","tlshash":"f1734e367d4db69ed10743d61a1f6026636f22fff88c4214e06c46b0c9276d7ee67a28","size":76047,"data":"","first_seen":"2024-05-02T20:45:57Z","last_seen":"2026-08-04T03:25:12.352335Z","times_seen":2572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b1967180477cf960031b695f89ff2a9","sha1":"a5bd7a02af3868691d6e6e037fbea2f6545cf61f","sha256":"b75906807d3bea11585a12e47f0fdbdc55d1e64c21c383cbdd81fba1827f573e","sha512":"9005663e77175c2ef0dff2abea017769dce3a6cdca3c53025943283f84d394df7c89ac03bed29896fd02b563f5a75eeff3ac3d2b490c5414f553fc717c78e226","ssdeep":"","tlshash":"74116f48b19b60306dc7d9b56fd7306010347103b885ca8d73de92004f7ba76e98bd8a","size":957,"data":"","first_seen":"2025-12-17T03:39:09.116186Z","last_seen":"2026-03-22T22:50:15.606123Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/0DcmNM7q.php?s=%2F%40v1%2Fcdn%2Fjs%2Fmustache.light.esm.js%3Ft%3D29453065%26u%3DMmjcwp7qCh4Vo46KGDY5MjYzOTQ4Y2I1ZTk4ZjIxYjZjY2NiNVf-ka7XNfOnnIPLkg","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2af454ea20fe574218ef025023a7de0","sha1":"865b930847e8398c2c9f35e7a7e90e64a76b6fa5","sha256":"8b5902c332a2bbc43277b08e92302d9f739c38bb132cb2f42868a674bd270475","sha512":"27a540898739bebc543eca969ebf6108d8a31c18c3f76c1bd179e9f8d521d1ed2f0a4e9374fe2a9987ac638dd4e390d193eb76f3262b5c5c1a95943f9bfaed40","ssdeep":"6144:6ujB8gltIeTM5/S8g6zRh5gDPzEVqZiaovCWoIz17D2TrmerTLuxw:hhltVM/g61sPoEZmlDIrPaw","tlshash":"22d4a3c4c32a2ab786c262b6d0b7a5afdf8d0c884d4b99d86fd91ec133c976211f515c","size":622675,"data":"","first_seen":"2025-12-08T08:51:50.605723Z","last_seen":"2025-12-31T18:55:37.628206Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/svelte.core.js","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a4c58672147f30d1c4071337a11e433","sha1":"4ac7a4ba7ea896dfbf66a11e7bd35ec9e25988a2","sha256":"20d7c0b69e29e7ba0c059fe11f81d2764227e0ee08aef4cfeea5cc5af14eb520","sha512":"152bfa5de4950b2a17ecc8b832171f931ca6ced26fad94bdb3a1bc22fee654b081de8ed23e7eae01fbe2a3c5dc6425997aaf31968e21de23deb70c7cfbb547c4","ssdeep":"6144:mv7Wh2bdJ+qZQT3iZSrmA2OO89/qQG0hpllmH:mVUCQG0SH","tlshash":"bd943f4553cb63a89a6d622560d2a2f8b78097f4c6fc140f6753b28bf8ff99174f6180","size":434940,"data":"","first_seen":"2025-12-31T12:25:53.553158Z","last_seen":"2025-12-31T14:42:12.245323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b44ddb78b8b6c976d09dd084321f96b7","sha1":"e1602347c053359cf34afed3e28369e34fc8b69e","sha256":"5e4400b9962d49dab8162fcade0c145fb03c1a72e2dd50156efeba336a0c2b8f","sha512":"62ffc683c9aa1cc6fc87cb2b39f770698c33932d027d8cd0f1956b3deb41b4c2ac06dfcef1e1168fc0b8fa0943bc04a7378e3d1b31bb5ed90e05b6a2c31b50bb","ssdeep":"6144:055m42N2NDn+qDQT3iZSnQA2OAYd5Y8SWzXll8+:06CEO8SWY+","tlshash":"70941e4453cb67a89a6d622961d2a3f4b78097f4c2fc240b6763b247f8ff99174e7180","size":427674,"data":"","first_seen":"2025-12-31T12:25:53.561208Z","last_seen":"2025-12-31T14:42:12.250827Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b574a076a30ee3f8d842fd355e460344","sha1":"5ffa4ae06c1d33a91392867becd4e85af8426c68","sha256":"ea465ac6b69a037dc49fda6ab1c585f95725091eff4515df61db91d9d3c5e54e","sha512":"ccc9bbf9943c019af5af75bc67c943013907d39406e469b6c5ce8c96c09d073f65ea813c63b2170723204a6feb75142b86e1edf7d1c061f3258c138467af2ae4","ssdeep":"768:xBsdL1Xq52ecoxdaQfnalvNsojRu9J0zNcHqLExvi/9TkJ0qqvzpO5tGwNcpJzRK:xBE2fnFAycpJc","tlshash":"f1734e367d4db69ed10743d61a1f6026636f22fff88c4214e06c46b0c9276d7ee67a28","size":76047,"data":"","first_seen":"2024-05-02T20:45:57Z","last_seen":"2026-08-04T03:25:12.352335Z","times_seen":2572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-04T08:34:29.660669Z","times_seen":47935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cashback.tradepadre.io/svelte.core.js","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradepadre.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:07 GMT","end":"Sat, 28 Mar 2026 22:07:57 GMT"},"fingerprint":{"sha1":"F4:E1:73:3D:34:EB:09:11:25:17:25:B8:07:7F:BD:AF:46:0F:C5:E5","sha256":"FD:8E:A5:13:AD:B9:9E:DD:F1:F9:FB:0E:10:E7:0E:3E:26:16:F8:3B:58:D1:45:D3:AC:BD:3D:7F:9E:00:EC:0F"}}},"request":{"raw":"GET /svelte.core.js HTTP/1.1\r\nHost: cashback.tradepadre.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashback.tradepadre.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 02:56:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694b566b-6a2fc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WySElfjPLmxlCM63fn8ZqMvgHD21ABO1zzIwmvDYLOo%2BPQAbR65GifHO5mMk%2Fqd96WOf%2BQFcOsNeqrsuhzb%2Bkg9EszKpw1uu4X11ywF5Z%2F0%2BC69b\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b69c27bdf3d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"2a4c58672147f30d1c4071337a11e433","sha1":"4ac7a4ba7ea896dfbf66a11e7bd35ec9e25988a2","sha256":"20d7c0b69e29e7ba0c059fe11f81d2764227e0ee08aef4cfeea5cc5af14eb520","sha512":"152bfa5de4950b2a17ecc8b832171f931ca6ced26fad94bdb3a1bc22fee654b081de8ed23e7eae01fbe2a3c5dc6425997aaf31968e21de23deb70c7cfbb547c4","ssdeep":"6144:mv7Wh2bdJ+qZQT3iZSrmA2OO89/qQG0hpllmH:mVUCQG0SH","tlshash":"bd943f4553cb63a89a6d622560d2a2f8b78097f4c6fc140f6753b28bf8ff99174f6180","first_seen":"2025-12-31T12:25:53.553158Z","last_seen":"2025-12-31T14:42:12.245323Z","times_seen":2,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/feather-icons","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /feather-icons HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashback.tradepadre.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 56\r\ncf-ray: 9b69c27c0be523eb-OSL\r\nlocation: /feather-icons@4.29.2/dist/feather.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T08:30:18.219238Z","times_seen":17705378,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":23,"dns":1,"connect":2,"send":0,"wait":33,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/0DcmNM7q.php?s=%2F%40v1%2Fcdn%2Fjs%2Fmustache.light.esm.js%3Ft%3D29453065%26u%3DMmjcwp7qCh4Vo46KGDY5MjYzOTQ4Y2I1ZTk4ZjIxYjZjY2NiNVf-ka7XNfOnnIPLkg","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:28.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradepadre.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:07 GMT","end":"Sat, 28 Mar 2026 22:07:57 GMT"},"fingerprint":{"sha1":"F4:E1:73:3D:34:EB:09:11:25:17:25:B8:07:7F:BD:AF:46:0F:C5:E5","sha256":"FD:8E:A5:13:AD:B9:9E:DD:F1:F9:FB:0E:10:E7:0E:3E:26:16:F8:3B:58:D1:45:D3:AC:BD:3D:7F:9E:00:EC:0F"}}},"request":{"raw":"GET /0DcmNM7q.php?s=%2F%40v1%2Fcdn%2Fjs%2Fmustache.light.esm.js%3Ft%3D29453065%26u%3DMmjcwp7qCh4Vo46KGDY5MjYzOTQ4Y2I1ZTk4ZjIxYjZjY2NiNVf-ka7XNfOnnIPLkg HTTP/1.1\r\nHost: cashback.tradepadre.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashback.tradepadre.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 12:25:29 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pEgOy7h1aDd%2BFxS3uQeDwSkSe17tUxm3qtWaH9Esrtu58ge8tLZLUbuI0rBlR%2B%2BfO%2Bl%2FxfzkspQpJLOK3n8gsDeoxL8RyKCm%2FHZMebRHWdn4gUpP\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b69c2837f820b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622675,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d2af454ea20fe574218ef025023a7de0","sha1":"865b930847e8398c2c9f35e7a7e90e64a76b6fa5","sha256":"8b5902c332a2bbc43277b08e92302d9f739c38bb132cb2f42868a674bd270475","sha512":"27a540898739bebc543eca969ebf6108d8a31c18c3f76c1bd179e9f8d521d1ed2f0a4e9374fe2a9987ac638dd4e390d193eb76f3262b5c5c1a95943f9bfaed40","ssdeep":"6144:6ujB8gltIeTM5/S8g6zRh5gDPzEVqZiaovCWoIz17D2TrmerTLuxw:hhltVM/g61sPoEZmlDIrPaw","tlshash":"22d4a3c4c32a2ab786c262b6d0b7a5afdf8d0c884d4b99d86fd91ec133c976211f515c","first_seen":"2025-12-08T08:51:50.605723Z","last_seen":"2025-12-31T18:55:37.628206Z","times_seen":48,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io//0DcmNM7q.php?s=%2Fjmpd%2F","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:30.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradepadre.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:07 GMT","end":"Sat, 28 Mar 2026 22:07:57 GMT"},"fingerprint":{"sha1":"F4:E1:73:3D:34:EB:09:11:25:17:25:B8:07:7F:BD:AF:46:0F:C5:E5","sha256":"FD:8E:A5:13:AD:B9:9E:DD:F1:F9:FB:0E:10:E7:0E:3E:26:16:F8:3B:58:D1:45:D3:AC:BD:3D:7F:9E:00:EC:0F"}}},"request":{"raw":"POST //0DcmNM7q.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: cashback.tradepadre.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashback.tradepadre.io/\r\ncontent-type: application/json\r\nContent-Length: 2212\r\nOrigin: https://cashback.tradepadre.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2212,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"9VvbJr6qMCG2MrBVCHPhq5zD8JaxCCouB9sY1vB7qb7HwnZnPeqbtGez3s9cXkBAmrvbm5ZWfGMPb65mcPF5Jeut8go2uDVWHKULxnf8LgCm1qGmxMeT4G4Z1Ysi5WcRm5KD7KfqHxWi2cnd8nJG97NwKVnJvYuw4be2egcmbGvQJxcX1TX94RBeGM9JyqXc9PCaPJ6g38PiPcwPoVcFpLFpxY1j48Db78UYPLtyP9Qvm1hAT9ZCWFNmfqP8qYw5kUQrffGcGvdo5rh3giFL4hRjksgYKxoqhGqdVd4AKe1NuLyBopYkA9jjcUj8boUXL6bnTkx5sc7bg7Cby9GVWjLfPEz71EuKph7npy9yNSaifM39h2UqkQKthctj9tjtYMBEYxSD4dTCrHCEuicodJLug1CphxsY17Xtw7t44PYRHyHJp1WFYmXp6nK4KHBmAo5QEtUXoBvVccYdMfVTUZDBVWuMFqnRs8o6K64a1j7214RKwefHuaJFnrYotYKuvc1yybRLQ1TBdsSq4isuBnMNAnf8gPpu3ny6xyGWRtBKAwxxTTGmH4T5R8hz5Mtac7r1Xb4PTLcct412wXma7MoR5ScVLyhgWUpAZA7Wq9goxSiRYy2CgZwNcXrfjvxvgWfFAVf6iMEnxZyn6dX9iqaRjzcnjaUtCHaFLeAFdBT1KyqJ1RjrfnG74wqtb5zhvbypeBwFXodA9beN1csStJwkBTdSVAzywxK2KA7tM2dPAFNSFusW5cYpgwiXxCseYrN4EyeUCcoBabeq1xQSEHxHK6PD1Nkovz6rzkkeP9X7KcJjMmyXH4k4sARmUWwHSHCiUVGzsDeQqoFbKxQtYiGtUcLiQ2bRvNY2XvCr3wD4esrfhh5k4LAWX6zmUa7kj82AHomXrf3zufQLkPV3uancRjphQpRo57W1b28DNoKVGmioTruw7nmcogra6tdsdsL8ZoHU9E5ZxwkS4w5xu2HKSpHyGXw9WVxRLcCzwAkTtzdh986gNHHTuw5SUy1qN6up94kjJvvPbkPsCw1YBX7V31MxXE2PuzkpZnpydEkfFpCjyy6zqXDNRLzDaCWYL5EmpGRaJGV1X3C2rn7FuBmWjd8k6VaEUx4HUvMq5M9XFzfQnuyGi6ykD8JNNDoyDP92SiYMocGjMc5FQZp26zhhwAFJ6RmqgJsLr6zEVvDjJr1YD8N89yMZgZPwt9dx2R4bzDfNrQJnrTfnasFgME65iNcY2h98dc7gwHSHkHyfKT1NPFCA5YBE1PCHL3zdhRHbKVWESPFNUUF8hUu2EM53SFz93QdjaeFMxD8AeYCRbYhitwwGT3M2rgrPEttf1bnHHERipZF6Z3jyZtVG44UnSKY5ukJsUJBCtJcT4w9skEDQK7Lzxj3qgWqcYj9uK8sK2B6fmiZ3wGipw3Nd9LkXA3qL9ymyGvbZnjtoC7tMMNbyAHMiSMBJ35Xp4SRxWzcPQ2KggbWmYe2DjkQi9nd9G7Z2XhJZmxmdtScf5skYhYYZugZCznpAruKMAHVNjYaJdb8suqfux5tRLubNyeZpU4NZ12MBanpey3vSgCZW3T9GZEK5RQtEzf3HARg5qMSVq1JmYQauhM1Er6tRTrVYNCqA9YcQvMm8Gfd2Cy1Ym6aoys3XZhmnD7ynRbgskjeCfnW6WD2LFJAT8KWpeuovtaXBay8tqJNbQobbsH2gLDRKwWLtkgBDAamZ4TV1TtxjVQhZ63NT9nmGHC7ha6hZYi8sRTaT1pBdSkQFtkJ19Rwu2HM5Zz1s2eFnQV8RJ8opnWgVsHjvmWcp6q3vFJo4qVoaitD2sFy7apfsHt6CkqvhWsGkuX87K5LiByLJJFPVG4jJudbbF8sEVLrCBpZsfvd4YeMdqoHj7AHyiTAPfikpKsoCmQqxVUwKejpLNZG1uYMB6StPeyxx3TotVmuL6nJUVAcPVFLvC5zLabiUM6A21wxjeS38mKqtiiVuWCfXEbzX3eduBSUKsiRedLGDxiwyridzQ5ig6VxfVQpihBp6wCcZTJEUSpUBikKysh5FVWdbJni1MXdWh66wKJzmtDfk2Wjkxp7rVhfV8dcgPX9KEM4zY1qNZUV9GSDn7KNEMh7Pv2skDsvqFCnSRrfVUf3wfm58wzjUoRDXsHe\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 12:25:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mY5KuGUR1zZiwY6rAX8dmrRyAtqPf%2BDE2a3JVFjVEuBlIbZX1KsIDpFabsd0T5Q8PyIwpBCt2%2FENTB2Ubujsp6MV6ZEpUzDwqSD%2FQgGqF4e5qMFK\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b69c28a8fa40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"727564afffc1fd412df0c9708ebac287","sha1":"d4ef7fde61eb4539eb159ed24f3ae6b44e5a417b","sha256":"5d5be936382c69c0f5b8e0baa28d4ed94d4d23c0fe6bc08f5c8b1181c725ac8d","sha512":"af25f621b67019262bfffc94dbbd315a4acc3a8bfd5c6a47b0e0a19fbc6c5524f41412df1b96b6878b3b248ca06f8446c19428fed9ac6075a5dc4458ce7088e7","ssdeep":"","tlshash":"18d023fc4da0dd033e6d5a571f94ea780563b9375dc04156995b03c1131b47fb61c25e","first_seen":"2025-12-31T12:25:53.555167Z","last_seen":"2025-12-31T12:25:53.555167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashback.tradepadre.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::dt6hk-1767183839026-2f90cbe19826\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 88\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIaiPYo2cl0uB5NoNK5jelg9K%2FIU1vQr12CaHWuplGfjKefmfx2Qd%2FsAU1YyMrTz3PWoH%2Fb80UF1%2B1%2FQw4RbeaE43xzXSMBIltu8%2Bn8vNV2AWA%3D%3D\"}]}\r\ncf-ray: 9b69c27c0f97b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T08:30:18.219238Z","times_seen":17705378,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":24,"dns":1,"connect":3,"send":0,"wait":5,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/feather-icons/dist/feather.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/feather-icons/dist/feather.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashback.tradepadre.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.29.2\r\nx-jsd-version-type: version\r\netag: W/\"1290f-X/pK4GwdM6kTkoZ77NToWvhCbGg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\nage: 40978\r\nx-served-by: cache-fra-etou8220119-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76047,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61490)","md5":"b574a076a30ee3f8d842fd355e460344","sha1":"5ffa4ae06c1d33a91392867becd4e85af8426c68","sha256":"ea465ac6b69a037dc49fda6ab1c585f95725091eff4515df61db91d9d3c5e54e","sha512":"ccc9bbf9943c019af5af75bc67c943013907d39406e469b6c5ce8c96c09d073f65ea813c63b2170723204a6feb75142b86e1edf7d1c061f3258c138467af2ae4","ssdeep":"768:xBsdL1Xq52ecoxdaQfnalvNsojRu9J0zNcHqLExvi/9TkJ0qqvzpO5tGwNcpJzRK:xBE2fnFAycpJc","tlshash":"f1734e367d4db69ed10743d61a1f6026636f22fff88c4214e06c46b0c9276d7ee67a28","first_seen":"2024-05-02T20:45:57Z","last_seen":"2026-08-04T03:25:12.352335Z","times_seen":2572,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":37,"dns":0,"connect":16,"send":0,"wait":15,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/style.css","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradepadre.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:07 GMT","end":"Sat, 28 Mar 2026 22:07:57 GMT"},"fingerprint":{"sha1":"F4:E1:73:3D:34:EB:09:11:25:17:25:B8:07:7F:BD:AF:46:0F:C5:E5","sha256":"FD:8E:A5:13:AD:B9:9E:DD:F1:F9:FB:0E:10:E7:0E:3E:26:16:F8:3B:58:D1:45:D3:AC:BD:3D:7F:9E:00:EC:0F"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: cashback.tradepadre.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cashback.tradepadre.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 02:56:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694b5669-319\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ia9YHPLW4o81e3%2BnB6CB6dV3lfa%2BXRG%2FFPvqLCZ52Lbn2xoAHTljIUDp3cqaJ6siHffmXokdQ4gGypM21zBfkESC5OB8Gz%2FhEVxLeE9RwihdB6I\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9b69c27bdf3e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1face95a4cfdcb2faf53b07a9acee4ad","sha1":"23cabde42defbe6dc1c09057b5fd89da04a79ea2","sha256":"e4abb40d32bb41e9776d06f3c9ea771f741680de623fccd0954115b8badb2f15","sha512":"e98af8bacae96fa457dc651024622df3e4bcad2abfed5169eb081df4550cf2d43a416797e9e0c25d3a59ac4a8fb656581afd06748e7998661e43ea029a3d1be0","ssdeep":"","tlshash":"7301fd26bde20c04860703a41aefb314217c94e3662b4cfe72dd084bef810b8b359925","first_seen":"2025-12-31T12:25:53.556607Z","last_seen":"2026-04-27T17:38:37.389792Z","times_seen":10,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashback.tradepadre.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::jwcjr-1765212281299-f54ecb125284\r\nlast-modified: Mon, 08 Dec 2025 16:44:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1971645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sizDDO7hrB9a5NHsmbK%2BIDYUwin%2F7P0yeXq3qApIzBr3dE9SoQFAcziITRDSNTjxERsaMANaAVtmqnj%2BK7lgRbCEq9fNDj8ErZuRBtTgQemP0w%3D%3D\"}]}\r\ncf-ray: 9b69c27c1fd1b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-04T08:34:29.660669Z","times_seen":47935,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/feather-icons@4.29.2/dist/feather.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:27.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /feather-icons@4.29.2/dist/feather.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashback.tradepadre.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9b69c27cfbc50731-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1150955\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 31 Dec 2026 12:25:27 GMT\r\nlast-modified: Fri, 07 Nov 2025 22:07:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:6kZaxraaA33En9pqscWF+VclCR7/RRXfYduR2dPF5U4=:\r\nfly-request-id: 01K9G5R4KK4GD7JWS7KM15JT5G-arn\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61490)","md5":"b574a076a30ee3f8d842fd355e460344","sha1":"5ffa4ae06c1d33a91392867becd4e85af8426c68","sha256":"ea465ac6b69a037dc49fda6ab1c585f95725091eff4515df61db91d9d3c5e54e","sha512":"ccc9bbf9943c019af5af75bc67c943013907d39406e469b6c5ce8c96c09d073f65ea813c63b2170723204a6feb75142b86e1edf7d1c061f3258c138467af2ae4","ssdeep":"768:xBsdL1Xq52ecoxdaQfnalvNsojRu9J0zNcHqLExvi/9TkJ0qqvzpO5tGwNcpJzRK:xBE2fnFAycpJc","tlshash":"f1734e367d4db69ed10743d61a1f6026636f22fff88c4214e06c46b0c9276d7ee67a28","first_seen":"2024-05-02T20:45:57Z","last_seen":"2026-08-04T03:25:12.352335Z","times_seen":2572,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/secureproxy?e=ping_proxy","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashback.tradepadre.io/","date":"2025-12-31T12:25:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradepadre.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:07 GMT","end":"Sat, 28 Mar 2026 22:07:57 GMT"},"fingerprint":{"sha1":"F4:E1:73:3D:34:EB:09:11:25:17:25:B8:07:7F:BD:AF:46:0F:C5:E5","sha256":"FD:8E:A5:13:AD:B9:9E:DD:F1:F9:FB:0E:10:E7:0E:3E:26:16:F8:3B:58:D1:45:D3:AC:BD:3D:7F:9E:00:EC:0F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: cashback.tradepadre.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cashback.tradepadre.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 12:25:28 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPqUI1GRjtNWOkrftA91h7%2B2Y%2FucvvOGr7QRq8n6e1hiaJECIKiyfP4BR5mb737nsj4s6sX%2B8yiqgxA%2FURbhwBT2pRKuJZ%2FGuAbMvZrU%2FXUqV4r9\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b69c27f0f4e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-08-04T05:26:57.066778Z","times_seen":46751,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashback.tradepadre.io/","fqdn":"cashback.tradepadre.io","domain":"tradepadre.io","tld":"io"},"ip":{"addr":"172.67.220.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T12:25:27.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradepadre.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:07 GMT","end":"Sat, 28 Mar 2026 22:07:57 GMT"},"fingerprint":{"sha1":"F4:E1:73:3D:34:EB:09:11:25:17:25:B8:07:7F:BD:AF:46:0F:C5:E5","sha256":"FD:8E:A5:13:AD:B9:9E:DD:F1:F9:FB:0E:10:E7:0E:3E:26:16:F8:3B:58:D1:45:D3:AC:BD:3D:7F:9E:00:EC:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashback.tradepadre.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 12:25:27 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 02:56:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDmD7SRDMBaxuINUe6jhQKEF3ZZpesMUp3WKlLoeA6QWWUUYZwCs%2BK42N9NVMA5jQSAIcBpAO%2BMw%2FJjmZuO8kgWlw6wfzJYhTPXbUYZwKe51Tj%2ByXEA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b69c2799c800883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":7348,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b000605fbc0bc1d5f02d39ec58e01c74","sha1":"45065e4f3fc057a4fe8939492c9e6ec6cd5a2aeb","sha256":"959fc622eb39afe6e3fb8674ff2cd4ddfbc01530c802bff7cdd7bcc593bb27d3","sha512":"e14e0352559f3e5e4bd6142c68b1a52c7c6dbfda5beeb71830f424cd44a93eaa1a6df8cec25790da1e4711b1765af65e458fa1372fc1f4bc1f43aa6ef088bd9d","ssdeep":"192:cd6hJwFTyFayJjl4chfDUihYjTcifHv5j5C56m:46T1phDUiOjTcifHv5j5C5L","tlshash":"9ee1743832f2003355c3c2f5b7d3ba2a6d789a47d963c9c4b3ec42814f5aea6da47564","first_seen":"2025-12-31T12:25:53.558528Z","last_seen":"2025-12-31T14:42:12.243321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":59,"dns":39,"connect":1,"send":0,"wait":118,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"cashback.tradepadre.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}