{"report_id":"94f8170b-141a-48d0-8bb4-76bcd8fd5ee9","version":6,"status":"done","tags":[],"date":"2026-03-06T11:03:18Z","url":{"schema":"https","addr":"cashbackusdc.fun","fqdn":"cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"title":"USDC Cashback","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cashbackusdc.fun","fqdn":"cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T11:03:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"usdc-658f0-default-rtdb.firebaseio.com","ip":{"addr":"35.190.39.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2012-10-15","domain_rank":0,"first_seen":"2025-09-30T08:55:18.288277Z","last_seen":"2025-11-07T14:03:59.023167Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":633,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-01T22:30:33.752681Z","alert_count":0,"request_count":4,"received_data":681893,"sent_data":1812,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":19987,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"firestore.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6651,"first_seen":"2017-10-10T14:33:50Z","last_seen":"2026-03-04T23:37:25.02645Z","alert_count":0,"request_count":1,"received_data":655,"sent_data":696,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":6,"received_data":271450,"sent_data":3366,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cashbackusdc.fun","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":111071,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"www.cashbackusdc.fun","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-06T11:03:19.468187Z","last_seen":"2026-03-06T11:03:19.468187Z","alert_count":0,"request_count":4,"received_data":203605,"sent_data":1821,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Firebase:10.12.2","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4375729ec3f073f05df1ee874b72a79","sha1":"5ccdef58e67c7176060c7540b88152adfd3373d2","sha256":"2cac4f05a48193264e08f75ff4ce5be5096e0c903a8eb87dcd307c947053b98f","sha512":"5bef679ce75646252a05a84a658938da46087c26020e3201451981af4088078f77313155bb93141e8cdde7383ecdb81252716ef14de96d6a0a348e1c8766067a","ssdeep":"","tlshash":"31a0247f4535445051700cdc730f144d404f3c3c1705c5d011c54dc000044330151707","size":72,"data":"","first_seen":"2026-03-06T11:03:24.204213Z","last_seen":"2026-03-06T11:03:24.204213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b7e92b204e4761d0c0bf7e774c59e1d","sha1":"f81006c202f438fcd36849d5dc8f4ea814f93709","sha256":"b0d5f6f0e3cae146dc3e698123fe9fbb47afa28ebebc6d90946447fc5ac7cada","sha512":"44977f28f48809357c4e4aa034cb0051cd82e349b2db015612492316b06ba2517e8cdba6622811b0850e33d2e348ddf27f98cee8abdbe6d472807fbf17cc4d4a","ssdeep":"96:5SRBeDgYGlYf3uFqwLyERciIAfFZT7P7Aq4MB:TCl2+1y0cidZ7d40","tlshash":"0e91766b3077283006b710abaf5bb901a0125447798be5953e9c86108fec759dff6ae8","size":4403,"data":"","first_seen":"2026-03-06T11:03:24.205621Z","last_seen":"2026-03-06T11:03:24.205621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f27e5bf7426d26f5d94b19fba48de19","sha1":"3da166f3a4e05163346679145d56437bae1f1b52","sha256":"29dcfdc6e94c777d01a745392dd871294ee6ec9ac29ad45c4c8148618167c3ee","sha512":"353be50103ec81106ad4a51e4dea6310b76c19ff5d4e234d9251bfd49e9737743873243becd60ab2e2dc5800069f016dfb4d7b37ebc5f7f5a8cac06536633049","ssdeep":"192:P72sd9IojHGGrL4THW7nJTOkb+gCbMv0h1hZ9uvHpi9wUToA5Am:D23mfCwu","tlshash":"a52272a134bb113641bb54de2f8b56656434a413b98ae0a47f9cc7940fd3846c5f3bec","size":10160,"data":"","first_seen":"2025-11-07T14:04:04.185407Z","last_seen":"2026-03-06T11:03:24.206877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eacb7535add32ecea19c223f6f2a9bab","sha1":"a4a62ffa1174629d6543b1b27933924bfbe2d5cb","sha256":"3b74c83aad55fee65d91dfcc1fbca4996c9a3f70131e0c6eed858bb5571fbe1e","sha512":"458752a2dd0b62835f2e574009646bf43753e9bd8a1afb422715d171d1d33520a86628df029ab7716f9f18f808a8e805b9682dac18a3447d8e905aa681a84c47","ssdeep":"96:oO/5JdvXyTXmnG8yaQWVFsNsd8GA0HRhUrLtxqDuI1AZDjBjA8J5U85AG:lbxXyXmGahVeNqrh2Ltxq6I1AZDjBjAy","tlshash":"bda151e739bb0a708bbf55aaa35b73403531600b3c81e1457eacca450fa9e8174772e0","size":4954,"data":"","first_seen":"2026-03-06T11:03:24.20835Z","last_seen":"2026-03-06T11:03:24.20835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54facf9c65f418d7fc9f1fbe74f5221b","sha1":"3b3012312d79767f9b169e69b337dc6f945fc498","sha256":"c78dae08099507d6e199c7e7696fe4840c5d50075f979059f83168b2ffc4145b","sha512":"8ea7020dcc72ae41cd131fda2553f68c39cedb1b476330ed93abe4bc885b1da1f309b3f798d3509473e804f6758b90db9575d8f75abc4ce8c7b86e0a3f677c8e","ssdeep":"","tlshash":"758142667677e93049f715da57db6382f122d9033586d4ab3a6cca004fe0dc2c5a73d4","size":3923,"data":"","first_seen":"2026-03-06T11:03:24.209624Z","last_seen":"2026-03-06T11:03:24.209624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa68a9b3c38962289992079517148f45","sha1":"ac85a58468c07545d64b062a1d2896e556d9c51c","sha256":"b2cefce37071c2323a93eb3651627fc7ff5a502e607649bb178f0c629ee87ec4","sha512":"40b94fb056c366f394a7f4f9c68d5f5f96f46be6d454cd8947c982b0a8fb10b69f15808db4dfd2f2501465b43067e48e5c86b7f9a47cb7a2dd3a0e5b7cb8e03c","ssdeep":"","tlshash":"2ae0224913a6f1921b60008c3e41380071d4a87b1f8db0f197f3876c162e42722b55dd","size":381,"data":"","first_seen":"2025-09-30T08:55:25.312912Z","last_seen":"2026-06-26T13:12:43.000894Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d163bbd9d5674d39e286988595fee00","sha1":"bf2201e743015796e6eee06899ef6b1473d8cf48","sha256":"841bdb5cf2f6a230b731b56870965aafa545965870d012ea61ab7c59c7fed378","sha512":"2342ef5761587a01d6af3096c8bbd9c4e6e8462f7f3a343f0aa4f09de5a89ced1c23f510a5e2af5caa0510f0ed9152c976f48b0d3a24a712c8d4f2b63d5ab236","ssdeep":"96:GIZEor+JmQtCXmOtyWqSLICIDCoAk/O4W2t66yx/5L:GIyo1QtCX1tyWqSLICIDC5k/fJt66yxh","tlshash":"de91665638f704228e67acaec38b1205723974073485d228be8ec7493fdda55dad73e8","size":4408,"data":"","first_seen":"2026-03-06T11:03:24.212123Z","last_seen":"2026-03-06T11:03:24.212123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f14185797be56cacf7662d4a56aaaf25","sha1":"8d09b6eb1b8b6c2e6bd970b20c5ec0bf1796842c","sha256":"8611e5c9b7278e6f14d732caf3e6269d1f38aa0fb550f794eaf765d92030038a","sha512":"b6bc073e93f4401c6029daa9d9d819663cbdcbe63ac08faa25db7487e62a69fe1bddd481e62fea2983c7b6769fdb0958eeee8f3539441406837669803aae63ca","ssdeep":"384:YuOWDeUOhz0ILMqJrhQzPR+Ju9AOEDrG9sk/Mf9x3IFaG08B7:YuOWKUQZL3GfmCro8B7","tlshash":"3992c5a632bb283018f360fb6fcb6202312560077d49d4947f9dc5a45f86e05a9fbadd","size":21207,"data":"","first_seen":"2026-03-06T11:03:24.21823Z","last_seen":"2026-03-06T11:03:24.21823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-app-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a629d733922bfe5a271fb7442e7d2d","sha1":"4ff6c1a761e51ef87275a2c5019053d9aee12e20","sha256":"24a1fd90a9424647636669f59013201ba385eff82a58f88c76a7d400d4d71139","sha512":"62bc3bced1515e6d2a0f61eb021a35ad46db5c25f5ea3f32bf48645b762a4b796c8f3b4b37a9610a5deddb95b9a2976059154357a4b59719e13df583be40ca15","ssdeep":"768:doe1o7IW3ERpulmQXJhC2tMNBLJTYbtlXpc6wA6i7mjz4yVjij:BW3iNQNhbt4zJQj","tlshash":"0ee20b587be3f4270bba40da11362403f76d5a48184d846cf22cecebaa9588751bff75","size":31444,"data":"","first_seen":"2024-12-12T08:48:16.722398Z","last_seen":"2026-08-08T01:37:58.985535Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-auth-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d5e3f12123510bebb0dce94fc5b28b8","sha1":"6af60ed8ea8f064f22067be39f84a546e7c16359","sha256":"277f6ef70525168247921e7a51fe995ecc66f9c3cf56c97f0d2bc262f74b5906","sha512":"3fc7affa8427b43bb0ff00327b3566c6e3223eddb35a3059b5ce0d7d6636cac547cc16a639d56781c79ffb326179c3c2f94a693b5e2a61a1983301bdbffac432","ssdeep":"1536:LpW3e2gdRLrb0gsHUXtqopqKVhuJnO2tvJm0xIDLKXS4crHRyapwhiGdfQWjdViH:OlgjLH0gs5B1h1xjdELDWGXgWlh","tlshash":"0ad31b8573e7e02286e984abf07b0103e32d5919794d802cb6299dde799ec85b737f34","size":139582,"data":"","first_seen":"2024-12-12T08:48:16.705213Z","last_seen":"2026-08-08T01:37:59.075059Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-firestore-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d18cdeaed10bfafe9bcb4dc685a9bd9","sha1":"7c1bba12b573f4dd41b71f8ddfb6d8bacc993c5d","sha256":"25133ac64bef210c19384ed72eafdec440c27c02a6b48e9d2b6b48bf7b00ad04","sha512":"0821b6bea123d60fa12c028257e3e5b4b4bf17d418f3e39d82c355683578a6a5419932590c973f508bc474ac7c312aedb1e891824d06b0259653ae936b33fc17","ssdeep":"6144:urcvGRJdfZ9rQJoyypuFy1Uc1PItdI6V9+oRBfZU:ILRJFrQJoy9Fy1Ub9+oRBfZU","tlshash":"8e7409c533a2b43283ea50e3507b4143f33a5899780e442cf66ca9db7c6594972bbf79","size":341174,"data":"","first_seen":"2024-12-12T08:48:16.709958Z","last_seen":"2026-08-08T01:37:59.037445Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94b10f0081ff9e202def7c2c57b57051","sha1":"57e3fe0d9c3663d119892264cfe1e2efd0922a3d","sha256":"31feba4726d56cb945e2a730cc3980309c54478b8c2b59b6b34698573de22052","sha512":"c26ac12e75fb9b9f45f6d7e68f7c2fb54252802f6f4db40be2b939644e6761d3902892fb7ce6886801a5c540f1d16c959b8a1a915df256390e93084ec9db727d","ssdeep":"","tlshash":"0e11e2c636eb74e9257b402c46ffe0103c655d062b4ef484bc9c454eeff16a05a6259a","size":1071,"data":"","first_seen":"2025-11-07T14:04:04.192076Z","last_seen":"2026-03-06T11:03:24.222151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-database-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88c989b093b117f5eaac476277538235","sha1":"ef91840821db12ee5ccb26acf3710991b2d10e8c","sha256":"274e3b01a7b86dc52441f9d0980ba765b7df6e5eff6e2d05a5ae62980140eca8","sha512":"a301f7e5ee3cc3511d5f54110d1d4e42db48e96fb01cc053d6d34c710b786f0bd5414d7ef42051ca32d5d6781b85fa2242f4a0f6559d437ab1c37a6b1c42bbef","ssdeep":"3072:5OGZyJhNOJVJzJIJ/JXJgJBJlJnJVJ4JsJdJTJd/TVgevklykU4tL3X:5B2EjdKxhGzndXaqv3d/hgAkEkU4tL3X","tlshash":"ccf318583281b52357fa96d641368243f33a18653909443cfa7cdce678a4a8a71fffb4","size":166145,"data":"","first_seen":"2024-12-12T08:48:16.714299Z","last_seen":"2026-08-04T10:34:53.56241Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"40f16f86cdfc6b0f40b1c5896c864bb0","sha1":"080e0a2c0c5eb70b991224a9e29952c54e9a4a8a","sha256":"157f03fab02d3c53245115a8341d1857f7e5cb6f316af03ba17d1b4936442be5","sha512":"0b36c36d0eaa800fe304a66f7db0101503f0136b340cc4974e99c3bd5849db179e944db63cc68c954c2d4293c0588c90ea936916b3189e4917fbcad5744d3bd3","ssdeep":"96:z4YZRBO5AGmzK2fzpysoqyZbX7j9qy9hzFW6knpEQo49EWcft91WbC9WFp:sYI2G6Tf4jZX3EyIPEQvE7WW9WFp","tlshash":"25b145b6357b24310ab780aa87dfa20074ec08436b4cf4657f9c19496fd158a9bf36e8","size":5336,"data":"","first_seen":"2025-11-07T14:04:04.192985Z","last_seen":"2026-03-06T11:03:24.224481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 136323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T07:21:10.128439Z","times_seen":254765,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":246,"dns":0,"connect":26,"send":0,"wait":13,"receive":3,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackusdc.fun/","fqdn":"cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T11:02:50.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cashbackusdc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 00:13:11 GMT","end":"Thu, 04 Jun 2026 00:13:10 GMT"},"fingerprint":{"sha1":"78:87:23:C8:AA:D0:5C:E5:E5:CF:33:4B:43:41:A5:8D:D9:57:67:FA","sha256":"6F:78:4B:EA:7E:7E:4A:67:BC:B4:96:2E:AC:41:CB:55:A7:3A:2F:00:CE:58:3F:CD:06:2D:29:7E:01:10:06:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashbackusdc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Fri, 06 Mar 2026 11:02:50 GMT\r\nlocation: https://www.cashbackusdc.fun/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::b9d9d-1772794970588-9a622c161f2e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":110750,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":138,"dns":61,"connect":1,"send":0,"wait":10,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/icon.png","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cashbackusdc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 00:13:11 GMT","end":"Thu, 04 Jun 2026 00:13:10 GMT"},"fingerprint":{"sha1":"78:87:23:C8:AA:D0:5C:E5:E5:CF:33:4B:43:41:A5:8D:D9:57:67:FA","sha256":"6F:78:4B:EA:7E:7E:4A:67:BC:B4:96:2E:AC:41:CB:55:A7:3A:2F:00:CE:58:3F:CD:06:2D:29:7E:01:10:06:5F"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: www.cashbackusdc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5890\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.png\"\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 11:02:51 GMT\r\netag: \"a691ab86a87e635f6d310766ab2b381d\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wkjwk-1772794971024-1ddc5277bb44\r\ncontent-length: 30265\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a691ab86a87e635f6d310766ab2b381d","sha1":"a642da76e60fb5623a9518922250548aae7382ec","sha256":"2a2b3af77c0e265e24e161dfc1af73750a6db30ee8cd9e417aa078ed6dc99ad9","sha512":"dabae7b88c14ae4137a263b770772d3101a470393973993acf0fb036c2e93b4c0c6a8e5297eaf5f3368983035c7169a43b3e9885aaaac95b41b0f14152ba857d","ssdeep":"768:ZjwtwPctUqUdK9012f5NnTPzg/ad4VGAjv:hb0tUq990If5NnPg/ad4V3","tlshash":"9cd2e0b0508d7cd9545f9a9ee0addc450577abe4dd0e3e20acea248498f88207afdd71","first_seen":"2026-03-06T11:03:24.1834Z","last_seen":"2026-03-06T11:03:24.1834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 136323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T07:21:10.128439Z","times_seen":254765,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":235,"dns":1,"connect":25,"send":0,"wait":9,"receive":6,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 136323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T07:21:10.128439Z","times_seen":254765,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":86,"dns":1,"connect":28,"send":0,"wait":13,"receive":9,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/icon.png","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cashbackusdc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 00:13:11 GMT","end":"Thu, 04 Jun 2026 00:13:10 GMT"},"fingerprint":{"sha1":"78:87:23:C8:AA:D0:5C:E5:E5:CF:33:4B:43:41:A5:8D:D9:57:67:FA","sha256":"6F:78:4B:EA:7E:7E:4A:67:BC:B4:96:2E:AC:41:CB:55:A7:3A:2F:00:CE:58:3F:CD:06:2D:29:7E:01:10:06:5F"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: www.cashbackusdc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5891\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.png\"\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 11:02:51 GMT\r\netag: \"a691ab86a87e635f6d310766ab2b381d\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b9d9d-1772794971643-342d480a601b\r\ncontent-length: 30265\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a691ab86a87e635f6d310766ab2b381d","sha1":"a642da76e60fb5623a9518922250548aae7382ec","sha256":"2a2b3af77c0e265e24e161dfc1af73750a6db30ee8cd9e417aa078ed6dc99ad9","sha512":"dabae7b88c14ae4137a263b770772d3101a470393973993acf0fb036c2e93b4c0c6a8e5297eaf5f3368983035c7169a43b3e9885aaaac95b41b0f14152ba857d","ssdeep":"768:ZjwtwPctUqUdK9012f5NnTPzg/ad4VGAjv:hb0tUq990If5NnPg/ad4V3","tlshash":"9cd2e0b0508d7cd9545f9a9ee0addc450577abe4dd0e3e20acea248498f88207afdd71","first_seen":"2026-03-06T11:03:24.1834Z","last_seen":"2026-03-06T11:03:24.1834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/icon.png","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cashbackusdc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 00:13:11 GMT","end":"Thu, 04 Jun 2026 00:13:10 GMT"},"fingerprint":{"sha1":"78:87:23:C8:AA:D0:5C:E5:E5:CF:33:4B:43:41:A5:8D:D9:57:67:FA","sha256":"6F:78:4B:EA:7E:7E:4A:67:BC:B4:96:2E:AC:41:CB:55:A7:3A:2F:00:CE:58:3F:CD:06:2D:29:7E:01:10:06:5F"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: www.cashbackusdc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5891\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.png\"\r\ncontent-type: image/png\r\ndate: Fri, 06 Mar 2026 11:02:51 GMT\r\netag: \"a691ab86a87e635f6d310766ab2b381d\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c7jw9-1772794971643-9f684c3dae5c\r\ncontent-length: 30265\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a691ab86a87e635f6d310766ab2b381d","sha1":"a642da76e60fb5623a9518922250548aae7382ec","sha256":"2a2b3af77c0e265e24e161dfc1af73750a6db30ee8cd9e417aa078ed6dc99ad9","sha512":"dabae7b88c14ae4137a263b770772d3101a470393973993acf0fb036c2e93b4c0c6a8e5297eaf5f3368983035c7169a43b3e9885aaaac95b41b0f14152ba857d","ssdeep":"768:ZjwtwPctUqUdK9012f5NnTPzg/ad4VGAjv:hb0tUq990If5NnPg/ad4V3","tlshash":"9cd2e0b0508d7cd9545f9a9ee0addc450577abe4dd0e3e20acea248498f88207afdd71","first_seen":"2026-03-06T11:03:24.1834Z","last_seen":"2026-03-06T11:03:24.1834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"usdc-658f0-default-rtdb.firebaseio.com/.ws?v=5\u0026p=1:378433797297:web:1e34911ef8fe7027b6f690","fqdn":"usdc-658f0-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.190.39.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 17:58:17 GMT","end":"Tue, 07 Apr 2026 17:58:16 GMT"},"fingerprint":{"sha1":"E1:D3:36:6C:42:27:6F:90:1C:F5:10:2F:3C:72:DB:58:FC:72:1C:92","sha256":"27:97:5A:F1:89:11:1B:FB:2B:5C:7F:4F:92:8B:72:24:5C:14:2A:58:9E:FA:09:24:B6:7E:C6:70:19:60:01:4D"}}},"request":{"raw":"GET /.ws?v=5\u0026p=1:378433797297:web:1e34911ef8fe7027b6f690 HTTP/1.1\r\nHost: usdc-658f0-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.cashbackusdc.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: wFSFKHQgnhToCeFSR2Crmw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Fri, 06 Mar 2026 11:02:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: SA2xpEuaj0m7OTtEU4zWUzkVtlw=\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":875,"timings":{"blocked":0,"dns":1,"connect":26,"send":0,"wait":152,"receive":0,"ssl":696},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-firestore-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /firebasejs/10.12.2/firebase-firestore-compat.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 101103\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 16:56:15 GMT\r\nexpires: Fri, 05 Mar 2027 16:56:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 65196\r\nlast-modified: Mon, 27 May 2024 17:13:46 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":341174,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4d18cdeaed10bfafe9bcb4dc685a9bd9","sha1":"7c1bba12b573f4dd41b71f8ddfb6d8bacc993c5d","sha256":"25133ac64bef210c19384ed72eafdec440c27c02a6b48e9d2b6b48bf7b00ad04","sha512":"0821b6bea123d60fa12c028257e3e5b4b4bf17d418f3e39d82c355683578a6a5419932590c973f508bc474ac7c312aedb1e891824d06b0259653ae936b33fc17","ssdeep":"6144:urcvGRJdfZ9rQJoyypuFy1Uc1PItdI6V9+oRBfZU:ILRJFrQJoy9Fy1Ub9+oRBfZU","tlshash":"8e7409c533a2b43283ea50e3507b4143f33a5899780e442cf66ca9db7c6594972bbf79","first_seen":"2024-12-12T08:48:16.709958Z","last_seen":"2026-08-08T01:37:59.037445Z","times_seen":71,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":97,"dns":1,"connect":30,"send":0,"wait":58,"receive":44,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 136323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T07:21:10.128439Z","times_seen":254765,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":95,"dns":1,"connect":10,"send":0,"wait":11,"receive":10,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cashbackusdc.fun/","fqdn":"www.cashbackusdc.fun","domain":"cashbackusdc.fun","tld":"fun"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T11:02:50.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cashbackusdc.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 00:13:11 GMT","end":"Thu, 04 Jun 2026 00:13:10 GMT"},"fingerprint":{"sha1":"78:87:23:C8:AA:D0:5C:E5:E5:CF:33:4B:43:41:A5:8D:D9:57:67:FA","sha256":"6F:78:4B:EA:7E:7E:4A:67:BC:B4:96:2E:AC:41:CB:55:A7:3A:2F:00:CE:58:3F:CD:06:2D:29:7E:01:10:06:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cashbackusdc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5891\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 06 Mar 2026 11:02:50 GMT\r\netag: \"107635146bcfa39da738ac209513819e\"\r\nlast-modified: Fri, 06 Mar 2026 09:24:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b9d9d-1772794970696-b1d200255bd9\r\ncontent-length: 28490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Firebase:10.12.2","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110750,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (437)","md5":"4c2cf79d9cac29ea62510be198126dd3","sha1":"c0bf01e259bb6a14969867088baa0bd82d72cea9","sha256":"3dc02467ee0ac5e02b58dfcac4640b211246cc5322f4a59fcdea4c0e35e9b599","sha512":"d1635b902b2264db77a148c180358aea6345bba0e71eef20e634ae4c0fe86042a4205ed274cc6e23dbafd0ddea9017160e7521802fe6e63395badca3fdfb2087","ssdeep":"1536:4/MOoFIZslS1Y+tWo21wakJu+Qx2jbohiNo3mTQKBulCFf+WKUQZL3C/r5X/H:6FSkUxEbo+XKUb1X/H","tlshash":"d7b3fa6272b7143064b3809abfd767493134d003e50ac568be9c4a64cfcbf96d9b76d8","first_seen":"2026-03-06T11:03:24.190693Z","last_seen":"2026-03-06T11:03:24.190693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow+Condensed:ital,wght@0,600;0,700;0,800;1,700;1,800\u0026family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Barlow+Condensed:ital,wght@0,600;0,700;0,800;1,700;1,800\u0026family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 11:02:51 GMT\r\ndate: Fri, 06 Mar 2026 11:02:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19301,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"21e73f53be36ecdb83189d82d1aceb8d","sha1":"4d827cafda1554ae4a5780bb2a092c431844c214","sha256":"e8992f033fd7ec8ca9b1127fc9550199f70f8318ff05fcbbd0b6fd3e10c22cef","sha512":"90e950cc0ad0116f30f7a0ced8b607b4ae70dd96f4e7b5494f378aacde8e520d28ee397426d320de71383a6cdf5e11dad16f92d425cacaef63fb4437f06f942c","ssdeep":"192:cmrSr89rzmC3CZ9CoEpHdhrSRS+eS0CBlvINNIxO34OxDENOPCO3/Nx8NNryfO3y:cmWSXmcw5i2E80lXuM0p2+g7r","tlshash":"5d82eb92006ba500eb971dc237cf7f36ae8e61946085c5b96ffd0cc99cead66036871d","first_seen":"2026-03-06T11:03:24.193771Z","last_seen":"2026-03-06T11:03:24.193771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":85,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-app-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /firebasejs/10.12.2/firebase-app-compat.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 9993\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Mar 2026 07:36:07 GMT\r\nexpires: Sat, 06 Mar 2027 07:36:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 12404\r\nlast-modified: Mon, 27 May 2024 17:13:52 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31444,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30862)","md5":"c9a629d733922bfe5a271fb7442e7d2d","sha1":"4ff6c1a761e51ef87275a2c5019053d9aee12e20","sha256":"24a1fd90a9424647636669f59013201ba385eff82a58f88c76a7d400d4d71139","sha512":"62bc3bced1515e6d2a0f61eb021a35ad46db5c25f5ea3f32bf48645b762a4b796c8f3b4b37a9610a5deddb95b9a2976059154357a4b59719e13df583be40ca15","ssdeep":"768:doe1o7IW3ERpulmQXJhC2tMNBLJTYbtlXpc6wA6i7mjz4yVjij:BW3iNQNhbt4zJQj","tlshash":"0ee20b587be3f4270bba40da11362403f76d5a48184d846cf22cecebaa9588751bff75","first_seen":"2024-12-12T08:48:16.722398Z","last_seen":"2026-08-08T01:37:58.985535Z","times_seen":115,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":108,"dns":3,"connect":29,"send":0,"wait":99,"receive":2,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-auth-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /firebasejs/10.12.2/firebase-auth-compat.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 39747\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 12:28:15 GMT\r\nexpires: Fri, 05 Mar 2027 12:28:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81276\r\nlast-modified: Mon, 27 May 2024 17:13:15 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139582,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9d5e3f12123510bebb0dce94fc5b28b8","sha1":"6af60ed8ea8f064f22067be39f84a546e7c16359","sha256":"277f6ef70525168247921e7a51fe995ecc66f9c3cf56c97f0d2bc262f74b5906","sha512":"3fc7affa8427b43bb0ff00327b3566c6e3223eddb35a3059b5ce0d7d6636cac547cc16a639d56781c79ffb326179c3c2f94a693b5e2a61a1983301bdbffac432","ssdeep":"1536:LpW3e2gdRLrb0gsHUXtqopqKVhuJnO2tvJm0xIDLKXS4crHRyapwhiGdfQWjdViH:OlgjLH0gs5B1h1xjdELDWGXgWlh","tlshash":"0ad31b8573e7e02286e984abf07b0103e32d5919794d802cb6299dde799ec85b737f34","first_seen":"2024-12-12T08:48:16.705213Z","last_seen":"2026-08-08T01:37:59.075059Z","times_seen":75,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":99,"dns":1,"connect":13,"send":0,"wait":28,"receive":33,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.12.2/firebase-database-compat.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /firebasejs/10.12.2/firebase-database-compat.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cashbackusdc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 48014\r\ndate: Fri, 06 Mar 2026 11:02:51 GMT\r\nexpires: Sat, 06 Mar 2027 11:02:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 27 May 2024 17:13:22 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":166145,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88c989b093b117f5eaac476277538235","sha1":"ef91840821db12ee5ccb26acf3710991b2d10e8c","sha256":"274e3b01a7b86dc52441f9d0980ba765b7df6e5eff6e2d05a5ae62980140eca8","sha512":"a301f7e5ee3cc3511d5f54110d1d4e42db48e96fb01cc053d6d34c710b786f0bd5414d7ef42051ca32d5d6781b85fa2242f4a0f6559d437ab1c37a6b1c42bbef","ssdeep":"3072:5OGZyJhNOJVJzJIJ/JXJgJBJlJnJVJ4JsJdJTJd/TVgevklykU4tL3X:5B2EjdKxhGzndXaqv3d/hgAkEkU4tL3X","tlshash":"ccf318583281b52357fa96d641368243f33a18653909443cfa7cdce678a4a8a71fffb4","first_seen":"2024-12-12T08:48:16.714299Z","last_seen":"2026-08-04T10:34:53.56241Z","times_seen":65,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":90,"dns":0,"connect":31,"send":0,"wait":109,"receive":10,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlowcondensed/v13/HTxyL3I-JCGChYJ8VI-L6OO_au7B6xTrf3fmu4kG.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/barlowcondensed/v13/HTxyL3I-JCGChYJ8VI-L6OO_au7B6xTrf3fmu4kG.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23780\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Feb 2026 01:21:51 GMT\r\nexpires: Sun, 28 Feb 2027 01:21:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553260\r\nlast-modified: Mon, 08 Sep 2025 17:56:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23780, version 1.0","md5":"5dfa75d7e8f4dd4f58b6c99ecfa3b6af","sha1":"7c0cd66812d89d3d24402c26fa20d4442c95e2c2","sha256":"59b48100622b2dea5b10bbf9e98d02eecf20ea8ae000821877f2d470ec16ee55","sha512":"f934a0723cd5fc2158c1a6041a861fdb498715a6b512bf4e9f1276ee89959a821e8fecfc31a7eeeb3a879ecb528f685d977f06e8c661b38e8699904fe843cf00","ssdeep":"384:1i861c/ryS/H4Rin70QPSwZUYkdv5wGiJqQd32/1emIBlON0mZvRiwE3VOfC:1i1c/uS/H4yQQPSHYkg/d2temIaqs43","tlshash":"6fb2e1c0491ff04581f78f7a91b766ac48abba21ca131155a8f5b8d3a47307e3f2d919","first_seen":"2025-09-19T17:06:03.382073Z","last_seen":"2026-07-30T20:04:56.075492Z","times_seen":94,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":9,"receive":4,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 136323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T07:21:10.128439Z","times_seen":254765,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":97,"dns":0,"connect":24,"send":0,"wait":18,"receive":3,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firestore.googleapis.com/google.firestore.v1.Firestore/Listen/channel?VER=8\u0026database=projects%2Fusdc-658f0%2Fdatabases%2F(default)\u0026RID=28488\u0026CVER=22\u0026X-HTTP-Session-Id=gsessionid\u0026zx=ni0sheknmsxt\u0026t=1","fqdn":"firestore.googleapis.com","domain":"firestore.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.cashbackusdc.fun/","date":"2026-03-06T11:02:51.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgecert.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:41:00 GMT","end":"Mon, 27 Apr 2026 08:40:59 GMT"},"fingerprint":{"sha1":"D3:DF:C7:66:BF:94:AA:4D:8F:F5:5B:B1:80:47:C8:96:27:CD:50:36","sha256":"D2:FB:B8:E8:C1:83:B2:86:FB:7D:16:73:66:5B:99:B5:03:FE:50:D0:7C:60:33:4E:DB:BD:E7:73:E3:23:C8:44"}}},"request":{"raw":"POST /google.firestore.v1.Firestore/Listen/channel?VER=8\u0026database=projects%2Fusdc-658f0%2Fdatabases%2F(default)\u0026RID=28488\u0026CVER=22\u0026X-HTTP-Session-Id=gsessionid\u0026zx=ni0sheknmsxt\u0026t=1 HTTP/1.1\r\nHost: firestore.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.cashbackusdc.fun/\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 1017\r\nOrigin: https://www.cashbackusdc.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1017,"data":"headers=X-Goog-Api-Client%3Agl-js%2F%20fire%2F10.12.2%0D%0AContent-Type%3Atext%2Fplain%0D%0AX-Firebase-GMPID%3A1%3A378433797297%3Aweb%3A1e34911ef8fe7027b6f690%0D%0A\u0026count=2\u0026ofs=0\u0026req0___data__=%7B%22database%22%3A%22projects%2Fusdc-658f0%2Fdatabases%2F(default)%22%2C%22addTarget%22%3A%7B%22query%22%3A%7B%22structuredQuery%22%3A%7B%22from%22%3A%5B%7B%22collectionId%22%3A%22transactions%22%7D%5D%2C%22orderBy%22%3A%5B%7B%22field%22%3A%7B%22fieldPath%22%3A%22createdAt%22%7D%2C%22direction%22%3A%22DESCENDING%22%7D%2C%7B%22field%22%3A%7B%22fieldPath%22%3A%22__name__%22%7D%2C%22direction%22%3A%22DESCENDING%22%7D%5D%2C%22limit%22%3A100%7D%2C%22parent%22%3A%22projects%2Fusdc-658f0%2Fdatabases%2F(default)%2Fdocuments%22%7D%2C%22targetId%22%3A2%7D%7D\u0026req1___data__=%7B%22database%22%3A%22projects%2Fusdc-658f0%2Fdatabases%2F(default)%22%2C%22addTarget%22%3A%7B%22documents%22%3A%7B%22documents%22%3A%5B%22projects%2Fusdc-658f0%2Fdatabases%2F(default)%2Fdocuments%2Fsettings%2Fglobal%22%5D%7D%2C%22targetId%22%3A4%7D%7D"}},"response":{"raw":"HTTP/2 200 OK\r\nx-client-wire-protocol: h2\r\nx-http-session-id: ZAhKgePnP4Y0LK-4zM736nGv5ATq8kgQBXXf4G6ABPvuiHYeHbW78Q\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Fri, 06 Mar 2026 11:02:52 GMT\r\nserver: ESF\r\ncontent-length: 71\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.cashbackusdc.fun\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-client-wire-protocol,x-http-session-id\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"46725fe409b2110fb4a50537844f084c","sha1":"2404ffc0568030299f31b46cb9a27e66d5d745f0","sha256":"73e3c0cc6fb6d9565a0b6421204fdecc33d595ac0a053f7a9f0394e169c65764","sha512":"415bebc12e2fad03358d6c28d5617e629ac82abf7cc0b382e5d4fa419411638ed08b8fe212f3c2c7878f9cf187fb3439e261c81c2fbbdd516abf6f5f12550b1d","ssdeep":"","tlshash":"9090025682080535c291a356c2a60019805f2015e2cd126484a9044061582e4e41c059","first_seen":"2026-03-06T11:03:24.202828Z","last_seen":"2026-03-06T11:03:24.202828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":114,"dns":4,"connect":29,"send":0,"wait":191,"receive":2,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
