{"report_id":"9af12a1e-a0e0-47b2-a4ea-520809395253","version":0,"status":"done","tags":[],"date":"2026-09-17T03:39:23Z","url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"title":"Robinhood Exclusive Cashback","dom":{"size":21049,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6846)","md5":"2780e46d5bbaf80141df617f224024b7","sha1":"2b4dfb22951307f6801828806e5a325ec511f817","sha256":"65092c1529057414c9542912105569ccde94bbbe02f1926bfc721dfa08f08bc3","sha512":"6dc6a2667da457bf099325babb21a0a5e475b7df3716389ba4245da546cbe7ec94928fc74037456d5ed9f6fff78b3285618ef229a67f5750c46ce5720e300858","ssdeep":"384:0z/g/PRvMynJ1ljWW68bI3Ee9j6AupZ7GIxGY+fXHoFoSJdInLGfgHi3ZwP/9+YY:O8GEeZ6LZ7RUY+fXoFoSJdw+YoD","tlshash":"a892092261f320315523868d7b976f062e29e003e515c8253bed43998fd6d99edf33ad","dom_hash":"domhashc5f833af15756f67a7f3221df4cbf90f","first_seen":"2026-09-17T03:39:32.66671Z","last_seen":"2026-09-17T03:39:32.66671Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:39:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-15T13:06:09.954433Z","alert_count":0,"request_count":7,"received_data":1227528,"sent_data":4060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-15T11:06:52.746021Z","alert_count":0,"request_count":7,"received_data":1101563,"sent_data":3740,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mail.robinhood-cashback.com","ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-09-15","domain_rank":0,"first_seen":"2026-09-17T03:31:07.572372Z","last_seen":"2026-09-17T03:31:07.572372Z","alert_count":44,"request_count":11,"received_data":1373977,"sent_data":4920,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"zennnnnnn.xyz","ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-08T18:17:57.412337Z","last_seen":"2026-09-17T03:00:37.196749Z","alert_count":5,"request_count":5,"received_data":1088590,"sent_data":2833,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed1.bnbchain.org","ip":{"addr":"34.243.96.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":2973508,"first_seen":"2023-08-09T23:52:32Z","last_seen":"2026-09-11T20:55:00.96155Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"3.122.92.245","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-09-15T13:51:04.659731Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1149,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"receive-office-tear-colours.trycloudflare.com","ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2026-09-17T03:39:29.449972Z","last_seen":"2026-09-17T03:39:29.449972Z","alert_count":0,"request_count":2,"received_data":48614,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-17T08:36:52.698843Z","times_seen":868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-17T08:36:52.71397Z","times_seen":875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1af73cf16b140946d772c45617ed6b5a","sha1":"4139479d7e072a1c490f801bd6dbd4454f5abdbb","sha256":"67e09546fe92e3f941f1c754bf1bd04b24a7bebf079f5708d4482e4205050de1","sha512":"4577436ae1c18bd35fb17a1dba86dc4d8aed681e343836ab9d1b92fe1b4094b697272df7c0f305c50bfa74c9fa0994f2282193a83c772de50ab9e60d585a5a36","ssdeep":"24576:1rLgGoy02HZZXbI1+86wifQlrsprzvQomGK:1l+tZ1KLK","tlshash":"4335f2994833427a26c842f86c1f0fc83da86fdce094a73b8575d4f677856ef10e6962","size":1084933,"data":"","first_seen":"2026-09-17T03:00:43.062207Z","last_seen":"2026-09-17T08:36:52.726331Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"86628a3a35eca553706a3a7b45f77efb","sha1":"1b153bcfb8758aac7ddaae208b33037aa83b242c","sha256":"f21286e6c0bb1965774b1bcf6ab95e6d8d3a17d97f3dc8ef696c3d471aed7957","sha512":"013a67bd1abcbdef3d0f118418a20e04750e79c90da1448a5c97044badc328c26ed5a82cb2dd79b32cf154be6701864ab24d348db7c2806e7cba5b0242ac4bff","ssdeep":"24576:BJw0dDhgNDThIQq8li6//u/F+xNlkYoI+DydsrFL5OaB3XXHzd0m0Oy0W5pgAUcw:BOWmhIQMF+xNlkYoI+OiL5OaBHXHzd0W","tlshash":"9175c80063d06954234b8fbb772bb5e6f81e096f78580c8fe614bc646ae9717fad4930","size":1571604,"data":"","first_seen":"2026-09-17T03:00:43.053137Z","last_seen":"2026-09-17T08:36:52.730462Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"receive-office-tear-colours.trycloudflare.com","domain":"receive-office-tear-colours.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-09-17T08:33:34.216032Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9417c4791f3b7e371d8b1b6876d62073","sha1":"255d95ab23430fd3ed72ebf33ccab9b5946031be","sha256":"2519048d6332633cbf176333f69b119545a7f71c742cffb1da2a0cfe8469a6a7","sha512":"cf100108b6d36ea466cbfa4fc569f1874edbd1b145a8711d195e667c466ca87d70ceb5acf609fb7e49c2d35c68ed57fafd913970efdc43bd39f0f532af6792e4","ssdeep":"","tlshash":"96117baa71a7206006d392663bc3a2443814a0033856ecdc7e4d81144fe7ea5d0abb88","size":1011,"data":"","first_seen":"2026-09-15T13:51:09.770348Z","last_seen":"2026-09-17T03:39:32.738707Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6d91f6713ad550babaecc85b3af23635","sha1":"bdd1bde7da70f2587af2bc12869579f98174db23","sha256":"24a959581f3ef7596d6c98a4d344f919fef81ca035a561453f8bb9a6c957767f","sha512":"4fd01437bbbac8190132e6d6f040890cf46023be0879cf3e68241dff19d655e54266cdea67e591393b384c4d4f57833af320fb4bfcf4f8ee4acbcea1fa69b048","ssdeep":"96:/bmO5EZz5IP7R6e7wkucaGysPmxUc39X+mAcADEzmv3DjlvYt7:DmO5EhoBbjHeUO9XscAAzmv3DjGt7","tlshash":"fcf1586274d2b14e01ca077e365867e6a0a6d906dd4ac40ff348eee875eec937a4c1f1","size":7866,"data":"","first_seen":"2026-09-17T03:39:32.739478Z","last_seen":"2026-09-17T03:39:32.739478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-17T08:36:52.705279Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-17T08:36:52.697344Z","times_seen":875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-17T08:36:52.725422Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-17T08:36:52.712557Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/ea498b8508.js","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdb3533a9d7e3b12fedb9c3ae08ee9d6","sha1":"077de84056abfd0af7932e0a65aed0330ab2a9df","sha256":"3ef1568a9bc9cf06cff476b2c927e9fdf43b39490a76a9cea8a7043f72431950","sha512":"5a615ba0ab1473f7ba59200961033f7ddac1701eedfa64426206dcc3673b19849f66a2d8c8d80b3edbca71fca76e9990e3102ba364b37c2546ff9c6ecfd0b3f1","ssdeep":"96:ZOkuEimAP0sQJNswieiLrk4sJKfS06v9c5Khw0fCICbC4CvCVCQCp7Kzm0nkm8xg:ZOkwPtQfNiJYKfE9nhw0aluVqVCtAkj6","tlshash":"7fb14258bf90784413e74773632a70aad55b9d5a1a0508cbe700fdc1b9a7e1bd2c9b70","size":5470,"data":"","first_seen":"2026-09-17T03:31:52.351906Z","last_seen":"2026-09-17T03:39:32.730925Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-office-tear-colours.trycloudflare.com/assets/index--rWyvUo1.js","fqdn":"receive-office-tear-colours.trycloudflare.com","domain":"receive-office-tear-colours.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c7c8c981bbec8c6f2359ace93b9de1b","sha1":"89a95fe2cc6d52b9f5a178b8d2a9afab47988e71","sha256":"6fefbafc28a4f7e70248b39ec420045da4da06207c59b4bb5d709494427bce21","sha512":"ab5625714936d77e0b75837589352f192a103972c59cee5443c9ce977ea4c48fd0d1e3b9cd557bf475377fdab8af639959bf0889f9bc731b446962c75f1868ee","ssdeep":"768:kEmJJf+MupPS+5vfWqCgsBNLFYRm2H7mRHge4zTjihknr/TmccsZ1NuzVqBQQVRd:kEme9S+vag8NhWmc7s4DRcspu4HVbOUT","tlshash":"fd23e19c29368194a8fc16dd2c2f45ceac7c0f9c64cd5917d02a61b23ad25a708ebd76","size":47008,"data":"","first_seen":"2026-09-17T03:00:42.991778Z","last_seen":"2026-09-17T08:33:34.163396Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"receive-office-tear-colours.trycloudflare.com","domain":"receive-office-tear-colours.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1b782597edee030df78eea6aded8c24d","sha1":"fddf3059ede6ac07718237fbd1e99e9d706d680e","sha256":"85bfcb5c675828795df5ea2e98d6c951399e01ae71854f17962d369bedaee694","sha512":"1961d541bb9d43e6fbc863f6415916d921b7f630f408841f121357584db56a95f97fd19c1ab96fce42a6c8cc623f2f1ef85853c0d3bd4a5874c2179478a42f40","ssdeep":"768:s+oQSEuNvn2hN/l4afrR7hyvye2dihSfkmm2CgFwri2TyCs3zjT00NMNBk0U1Z57:s+oQS3NoxJ3AmWDxF7oGbQ99RwWh","tlshash":"aa43c59163d0ad10274b6fbbb72f71e5e51b199a348488cfd604bd547aea213ebe0930","size":56445,"data":"","first_seen":"2026-09-17T03:00:43.060729Z","last_seen":"2026-09-17T08:33:34.197608Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-17T08:36:52.706302Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[crypto] pure-JS fallback active (non-secure context)","filename":"http://mail.robinhood-cashback.com/ea498b8508.js line 1 \u003e Function line 3 \u003e Function","line_number":3,"column_number":1455671}]},"http":[{"url":{"schema":"https","addr":"receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"receive-office-tear-colours.trycloudflare.com","domain":"receive-office-tear-colours.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:01.565Z","timestamp":1789616341565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: receive-office-tear-colours.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:04 GMT\r\ncontent-type: text/html\r\ncf-ray: a3c514ea5cb50731-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":768,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f3b43e888d375e471fde6a217023a3fe","sha1":"c0c957abc4b35426442aced5ec15732ae5dc6bf2","sha256":"435bba95b7b017e5c9645e2ab33f142e67a6e80360892508001e28c7491b35cc","sha512":"a0c2ea506bcb28f17777f4bb4c3505583d2b49a588055b2239083c309a798c330c3fc751591a360d74da3c15b4b775557bac98dbbe0c1cdb2732f0b2a40bf8c3","ssdeep":"","tlshash":"8111ad850d57407105f78a9a3b5f7f05b7a6924a40c4c5003ffae2b6afa3e4bc809ad8","first_seen":"2026-09-17T03:00:42.990424Z","last_seen":"2026-09-17T08:33:34.102185Z","times_seen":21,"resource_available":true,"data":null}},"time_used":3356,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":229,"receive":0,"ssl":3121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:02.639Z","timestamp":1789616342639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514dd8d1bb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190142,"size_decoded":31408,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"63b7bd3c11c6a14a1d03b49e804038c9","sha1":"8cc865aeabb00541e66ce921fc249e155a8882f8","sha256":"d59db9618c83ad71f28e21378dda80348d724f645cc2a3c38c9f033ae373ab8b","sha512":"ca9d94cc8ffb84fef9fda7562291a82861252a4a162e8b71f11d105c748092f5edc25c102f7c6bc0f2fdc4c79995ead5d64a6fc69cdf4d304001e3109a979c32","ssdeep":"1536:KHtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8y0W:KvRWzd3T7waCU15Br9LmW0W","tlshash":"7504536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-17T03:18:35.323124Z","last_seen":"2026-09-17T08:36:52.722371Z","times_seen":22,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.101Z","timestamp":1789616345101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://receive-office-tear-colours.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\nlast-modified: Thu, 17 Sep 2026 03:39:05 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: a3c514ecfcfa723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":732,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-17T08:36:52.705279Z","times_seen":216,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":130,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/fonts/font_1048573ec372a0c4a60bd3d5b3ab3b82bc3973da.ttf","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.297Z","timestamp":1789616333297,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/font_1048573ec372a0c4a60bd3d5b3ab3b82bc3973da.ttf HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/style.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:53 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326048\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326048,"size_decoded":326381,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"84cf795ee940a39423fbee3dad4017c1","sha1":"1048573ec372a0c4a60bd3d5b3ab3b82bc3973da","sha256":"e7a1aaf7eda9f2fad4131725fa556265ec75ca7b2d756260173a040363e8d4f7","sha512":"e276355be5d939caa93c6417048240550d47bf9b5375e54955e9855acf1647a36b1ecf9084a0817be92cfa8266f3b32d229691f467f838575bc2a904a14efb4b","ssdeep":"6144:Eb9pkGmW8XFh3q+D2aLMs9lE+nr1kPLN5W6+8/WYJ0Km/ZpDfik:EkGmW0FyaLfdkPLm6+8u3ik","tlshash":"23645b2bf723d35dd7052c39cab2c7a437757ca1bc46a10bb0aa3a95cd9b0b019d49e4","first_seen":"2024-08-15T00:58:32Z","last_seen":"2026-09-17T03:39:32.680152Z","times_seen":930,"resource_available":false,"data":null}},"time_used":988,"timings":{"blocked":-1,"dns":0,"connect":171,"send":0,"wait":175,"receive":686,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.931Z","timestamp":1789616333931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 17 Sep 2026 03:39:00 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehADRjontifdWMsy%2BymDmO376Dfccwz3BvJ%2FUmTdu09YpaUC2H1%2FL5LIiDb6ZMvOfZrpQJ%2F84UaPmbZCUawZOmtsArWrpaqHOA02elkweP5U9e%2FEFPyjRaXtkPGOnM47\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c514cf497a0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":645,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":6529,"timings":{"blocked":0,"dns":47,"connect":3,"send":0,"wait":101,"receive":0,"ssl":6378},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:02.561Z","timestamp":1789616342561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514dd0d15b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":27971,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21c02aadfaa8cf09c77ca410f3c3f75d","sha1":"60e552132fc6999ccf5f70994725f2cac6bbaf09","sha256":"80b2a0464dcdff2e416bea02aed8a79fba6fc1ae8785ff5a5b2e42984b6690ba","sha512":"c6e42cd0ab4a7f55c5d09c499085689df2982ac63645fe30a13a851c586c124e1502a19852be30e6042e67f54d34c83ae31be2d43bbe8bf94594ba3512ddd99b","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9jb:Gu+4PCuielkAnaK/p9jb","tlshash":"69f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-17T03:00:42.993919Z","last_seen":"2026-09-17T08:36:52.703037Z","times_seen":24,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.267Z","timestamp":1789616345267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: a3c514ededed723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3854,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-17T08:36:52.697344Z","times_seen":875,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:52.253Z","timestamp":1789616332253,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/k46o1gntwsf.4lhk8rma.js","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.081Z","timestamp":1789616333081,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /k46o1gntwsf.4lhk8rma.js HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1533,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-17T17:32:31.768992Z","times_seen":155487,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":173,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"34.243.96.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.660Z","timestamp":1789616333660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":34,"send":0,"wait":35,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/images/image_ff4f12270a4e8b9373e76524ca6340ab5edd0a9b.png","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:54.443Z","timestamp":1789616334443,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/image_ff4f12270a4e8b9373e76524ca6340ab5edd0a9b.png HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 836\r\ndate: Thu, 17 Sep 2026 03:38:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":836,"size_decoded":1167,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"30d774e3c1c151961d96907db8677b11","sha1":"ff4f12270a4e8b9373e76524ca6340ab5edd0a9b","sha256":"5e86fe428e28d11c4db11f7353262ac660ab6a80d728adc68b839951fdb675e2","sha512":"0439b347aac3d6d2fe2b489acdf01dbfa97624436770eec93441be0a60c1852a1a3c6ef7acdb23486082be13d63044b4fff3a83f6461a4d4c27232c17f09cc13","ssdeep":"","tlshash":"2a01d693ce0104b5e75b074cc5c44916f93c2c95af642fab8d4e900d40801851dbfba3","first_seen":"2026-09-08T18:23:29.302203Z","last_seen":"2026-09-17T03:39:32.690828Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.269Z","timestamp":1789616345269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: a3c514edfdef723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381218,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-17T08:36:52.712557Z","times_seen":215,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:38:52.642Z","timestamp":1789616332642,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncontent-type: text/html\r\nlast-modified: Wed, 16 Sep 2026 02:50:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 7988\r\ndate: Thu, 17 Sep 2026 03:38:52 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13741,"size_decoded":8288,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6847)","md5":"e56b28a72691d72abb8c708edfcedb70","sha1":"44ee987ba4ad1aaa65b9f95997e5a088b4e1a4fa","sha256":"4c5512db472881063fa3bc0ad98e8fb91d480f17ffd4190280f9354ca00b5552","sha512":"cc6b215934a18acccc3cbd9f3785e7c6a5d74607a28eb204d602bbdc98141657effa1dada901e70fe54fcfba4337c62a0223c124882d1f931b3547601e009b9c","ssdeep":"384:J2lT8bI3Ee9j6AupZ7GIxGKsnLGfgHiH/bYP/9+V:28GEeZ6LZ7RUKq+V","tlshash":"93522a65f0f64032116283897657bb162e48f003d6599051b7ad8be80fe6ea1ecb32ce","first_seen":"2026-09-17T03:31:52.359775Z","last_seen":"2026-09-17T03:39:32.695166Z","times_seen":3,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":3,"connect":174,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:00.747Z","timestamp":1789616340747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"fgEL6c-XcSOnAtVh1_A9\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:39:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FmGmEM4V2%2Bu9ngqVUNSGZw6IZnHUd5PDEYCtM16PorTNGkM8zj%2FkRPtBx7a6lFaFkGxVPLvtTr6p99cx1aXkJCjCNBb68L5P6rvHfP5a1iRsrF%2FMdbDJIxAgkjGkMEK\"}]}\r\ncf-ray: a3c514d20ea05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084907,"size_decoded":833432,"mime_type":"application/javascript","magic":"data","md5":"495dfebf4ecf884ca6c731127188731c","sha1":"87130a0ee9f6f3bfd694dab3d775e255303d3d0e","sha256":"4cae0819b5dac7d14a092667465be997159c7b293495af6923495c098f8d17e9","sha512":"68fe56cdfa1b01982acdb80cfd34eb57582f46fa3540219e0848db844af654a6b3a8ed7b7900000479d7ef2a0c6877bb4ea459dea2ce4e6ff157e3082f7ea764","ssdeep":"24576:OrLgGoy02HZZXbI1+86wifQlrsprzvQomG9:Ml+tZ1KL9","tlshash":"8535f2994833427a26c842f86c1f0fc83da86fdce094a73b8575d4f677856ef10e6962","first_seen":"2026-09-17T03:00:43.048807Z","last_seen":"2026-09-17T08:33:34.17783Z","times_seen":13,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:01.948Z","timestamp":1789616341948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514d92d02b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165456,"size_decoded":28059,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cc746627b65cab05eee177205c7bc16","sha1":"053729e37c6abeea5bc4ba71869bebb51082253f","sha256":"f912815457ffe426e31eab46ebafba6aed1db4b6e0a58a9a2720acedad9d8d65","sha512":"f31cf091d7f1098c36879b4fc2b70f9bfe14eec9d8c9bb06bb09d64467882819b0bb6e9f95f94891ebf56f73b483cd3c0ae9b9aeab9a55c9610df789ab30ebb0","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF1Iiz5K/naLu49QmqgpeJ:ZFVz06UZgEx8eIiz5K/n6qg4J","tlshash":"5ff3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-17T03:00:43.033579Z","last_seen":"2026-09-17T08:36:52.71335Z","times_seen":24,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.386Z","timestamp":1789616345386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: a3c514eead1835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":699,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-17T08:36:52.698843Z","times_seen":868,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/images/image_8f757c8affb66fa1bcc4f49f66d8773825c1f31b.png","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.086Z","timestamp":1789616333086,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/image_8f757c8affb66fa1bcc4f49f66d8773825c1f31b.png HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35670\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35670,"size_decoded":36003,"mime_type":"image/png","magic":"PNG image data, 1440 x 282, 8-bit/color RGBA, non-interlaced","md5":"d544af1ce573d0f43069de47ea1b31ae","sha1":"8f757c8affb66fa1bcc4f49f66d8773825c1f31b","sha256":"26f3c0f37cedad3ad22448f2aee3e9fe8ac359e62aec8f03b8f9556130389516","sha512":"e636850dd389341aa777ec780d82211eefdc3808ddc0525c315fa63acb41b00baf3ee024dd9d1ec84d26e30b9de5b54e9d7b52b0a9f0e2f855d4f27a0bbee7f6","ssdeep":"768:a9OPbx3Fr6O5l078/OA2RqRoJeTLpHxigITX4PXGCu64SBrO4:A0b996O5Q8mANoEbigITXUXf64","tlshash":"c8f2e14e640be443cf8b0d664dfaa17b4e3a852ee882bdfd15f69aadfd4210500e11dd","first_seen":"2026-09-08T18:23:29.295607Z","last_seen":"2026-09-17T03:39:32.701286Z","times_seen":10,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":164,"dns":0,"connect":171,"send":0,"wait":174,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:02.678Z","timestamp":1789616342678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514ddbd1db512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67158,"size_decoded":12221,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b1665b3c0e8510100d0f59aae33b408","sha1":"7ef23980c06e96bc18430ef5b420ba4089d767c7","sha256":"1bde739252b0158b71fe7ce27e40d64de24ebbcc417a98fe896c00b23e0f3d90","sha512":"b184a9134b27d66bb7098dbe4dcfdebae57483d59db81caff1ade281eefc3961054ca293acbcc510bf5543391dd856379778bb458a1cbb702987b578922ee0e0","ssdeep":"384:x+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW9AJUlpujdQ4yMup8:BcEv+U1lryV6w+5WCFjrI8","tlshash":"3663946b8f04ee762bb2138d515c79eca64f2117cdc99cf6e2d1cf1440b4af7226219a","first_seen":"2026-09-17T03:00:43.042129Z","last_seen":"2026-09-17T08:36:52.723174Z","times_seen":24,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.264Z","timestamp":1789616345264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: a3c514edede7723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10636,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-17T08:36:52.725422Z","times_seen":736,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/fonts/font_78eae8a823f461192b4df2d67d7eaa818cf09b5a.ttf","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.295Z","timestamp":1789616333295,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/font_78eae8a823f461192b4df2d67d7eaa818cf09b5a.ttf HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/style.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:53 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 324820\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":324820,"size_decoded":325153,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"a32ace5dba8400232b84bc017dcc38ef","sha1":"78eae8a823f461192b4df2d67d7eaa818cf09b5a","sha256":"1b08e7fc267a5c7e1d614100f604b83e7e8a0be241f0f288faa2b3ac93a683ba","sha512":"7885b898af0ce9b260017dfa483ef7641bdab7383421f51fe7215840eeb9c0a0eed9a8ce28f1f1c88590ffd6a76deedfc37e106ee1e1094af7404966fe41d251","ssdeep":"6144:Jxe0kGmW8XF53q+DREk6wPtE+nr1kfmq+HpvaQCRa14UYE0o:/e0kGmW0FGkZdkCvyR+0o","tlshash":"98645b27e723935ddb452d35cfa2c3a43775bca1bc57a20b70aa3a94c88b1b45dc48e4","first_seen":"2024-08-15T00:58:33Z","last_seen":"2026-09-17T03:39:32.705911Z","times_seen":1394,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":171,"receive":688,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/fonts/font_b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc.ttf","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.298Z","timestamp":1789616333298,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/font_b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc.ttf HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/style.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:53 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326468\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":326468,"size_decoded":326801,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"c59d7314123c3b770bfbbd994215805c","sha1":"b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc","sha256":"b37284b5701b6b168dfc770aa1a4ac492106422fd3ba76bc7641e37434e8019c","sha512":"30ca9372127d8269c5697175ddf4b0e5b3f903b556c6c15673c8c6cd09d8c318e048fe4879acd4d28f510ce6ba1c02db8b2f71374bfde7ce4a3263a94a97ebc4","ssdeep":"6144:MFccVkGmW8XFu3q+DXiMD3E+nr1k42hEysvzVwcZ2P+U3j6jCf:MlkGmW0Fyiodk42hEysvqcZifXf","tlshash":"6c645a1bf722935de6422c38cab2c7a437717ca1bd56e20b749b7b94cd9b0b418c45e8","first_seen":"2025-09-18T00:55:20.188069Z","last_seen":"2026-09-17T03:39:32.707959Z","times_seen":705,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":173,"send":0,"wait":174,"receive":694,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:01.920Z","timestamp":1789616341920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 8f01ac96a6db2a2704155544634c9b1e\r\nContent-Length: 1316\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"Ic9MXbO0Q7IrvDB2pQHph4f8NCl2Nj6WvszI8tnBeAtABYozs/J7fjzHrD9bsm0BreEzpcbqwTYbFlltZ6bWfTd5F0BrMXLkeduq64YnWM3JIJB19Ni0n4uRnPK3SBA2QaRhPPrz0VKN16+21OH1qMB6lAVM1yVluu7LJH+FWfDUPs/Zs57knwA6rWLcEGVkBHl1ONF+Lie6muUQ0BiuPAMGk7ljNJjUNWBi1Stdrkt8ksOAuabDxVXsKIIJYwGVk2/QnwxK6zicEXbDPFbr4ZIIGcZqTO0+4t1yxFKSQQ3EpB/oUbp5ZM/8oC0yGw3HOw0NS9pcvyirLPGnMA8lo6nTpfQ5wj/7/oQ5XUWERLqt+V83C10xX9K95w+jI8ZE905aXiO5RuPuv+lqWK7k9QXLttmi1fX3bIzwIPTzzMMgcepHiGQ3Y9Ws6UfWzrssfQol0rV8loowFdyrJp4BTCoC+am2dQ740GVAH7YBuVkZsUlOv44OVglwd7sbYxpT5UaDbbX6M0TH8LMvaJ86Hs7yZ3OKMiuo7gr/zRSZTE1cZcmXROB48UElF6Ai4kEqpd4FQNVjEqPbkiMPiAIGpIu52O04utGNT4fbsTBSu99gGgE6S/0taagsmfAuPB67ENu+Aiz/0cFv8oD9V7bvm+PH1WrOEJNvb3PVecC8ulK8j3mb45uM9VLumGQ1Ki5HcJh2Tq34jUXDsBSPc70gd5PAPRdHqGKD/+SV8Eq01O8ozIxvTvYUALf/ZN8lvcTfC/IijTUiQaA2gC6tym7UGWyf/34lRbKXRb24hVmd6oZ7AKvMMP7TYg14KWjawdfEEXoLDc07pM1yxlfKH4LAz0YzpqPjtuMBKaxwPl3yuzTfl9bDd8AaEt7IwpKHGzK06B1Hg+9P79yL8LdIx9CECgCu2dpN4vHcgcbTHia+HhEJmEyYR/SoCGxbaRxFP3KQGqmyGDqssz0eFKJeLdJyV/eh3FBVQTA0oaXy8B48Bl39ACZ9gBadIlXwVxtAFtCXB+KPblWiGOie0x6EVnUXkwdqbUQQD+1aAQdNLB7fv/dG4VCFcgp3+E0ciW1jW2JDppXLqYdeieUChILcgQbusO5eeqF04vUiXDwpJvDRi97heFFeRZWn8HywkHtDKUJaUlltfTylzfQS7sAZlBNmGAI2yynnyCljhc3Pu+YfEggN89CBQzxMkWtuHKsrN4TM1rDtYS5wmOjB8LXuouCf2b66GM/htKg90A1TC2bwHAi5emFCPKYvJ72s67IrfKheYLBLIJ/VOL0nnYTJVh+utXBWiHjHizV6498="}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FosK3tvA3ArX0p%2B9IxWvjd3aRCVm2%2Bz9o54zRSRcXydAcek%2BGuaz2M2HzRF6igR0O3ACL57Q2s%2Bsk3nOh2ZrSZauyitB%2Fq8huR%2B3pPXL%2B%2B7lWQjLPabGkx1kett%2FnCaQ\"}]}\r\ncf-ray: a3c514d95f025694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":979,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8489b9eca5301b7a824f7bc0f1093be","sha1":"9bf97912d250cd6b438434da063b14f0e97c9ecb","sha256":"a75abae3704e473e254f0a0183aeadf394ad532f62333ea049a096b083a0b8be","sha512":"14f9bced55c716df34ffe7fdfe8574e3be4c3a82c23bc6a8d8a60bb1a25bdab758f7f2f074adee57325bca8bd1f6d195c7e26b1508a8be5ff7747411cce0b1d5","ssdeep":"","tlshash":"a6d0eb725bb7b402ec480200f01a6610aceb8201e4f0e80930a8223f08e065fa0120fb","first_seen":"2026-09-17T03:39:32.713609Z","last_seen":"2026-09-17T03:39:32.713609Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:02.605Z","timestamp":1789616342605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514dd4d19b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222558,"size_decoded":31517,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ee77d3966087720e6a9542b94f41d886","sha1":"ffe6d608b939aa80680fbfd8d5e37d2aa3ee6e9e","sha256":"101547bb68615764667ef788d7a89097d4beac3702941831d242b8dd7c3fe363","sha512":"7397f623b7b505ad59ff2a960eb9677b177476d50f7925dd73ff80194e03d045b35bd2a8ca213ae58caa2d443a821e09d0879e2a962ab49dc98ddfd3c3ec9877","ssdeep":"1536:pbinZhimNX3XFQ9LujpygGWudQT6bjzeFedLx:pWnZhimNnEC9B3udQCjzeFedN","tlshash":"3724656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-17T03:00:43.045039Z","last_seen":"2026-09-17T08:36:52.704343Z","times_seen":24,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/fonts/font_78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73.ttf","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.300Z","timestamp":1789616333300,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/font_78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73.ttf HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/style.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:53 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 325304\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":325304,"size_decoded":325637,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"eb0312411b133c48049ac630ab7f1fec","sha1":"78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73","sha256":"8c883f63b2c4157d997319f2c8bc6995ed4357ef371940d31ca159004a4aae63","sha512":"d79527b4f0e7b43908d6ca69e104f9ec464023e9f5767f62decb532318f36a0a4b044cde66dd96a9f1eb0b2c4a1c82134dfc8d5c6f9b7ac1ef491454e63edf9b","ssdeep":"6144:LqBkGmW8XFE3q+DUe9MS3E+nr1kBCJWWUmQEEAwlokfVo7GiPKU3+OaT7Dfs:KkGmW0Fve9Rdk8WWU30KU0k","tlshash":"01646a27f723d35dd6462c38cbe2c3a033797ca1bc56a20b745a3a95ce9b1b419c45e4","first_seen":"2024-12-14T17:19:05.431584Z","last_seen":"2026-09-17T03:39:32.718066Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":173,"receive":684,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:02.073Z","timestamp":1789616342073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:02 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514d9fd07b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183275,"size_decoded":29504,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"281564a8561851ae6e12be4f359acdb9","sha1":"3fab59cf6024e64043fcdf449795b7058466debf","sha256":"522b9886d8cdf9da7daa3aae81887759367e634af6672859f503719a5ccf3b6d","sha512":"e151e1bb41ccb9237ceb15f2f424b1bdfdb93d7bb72f02d51a120816c84c13f93e7a2579dc398da4d8fdf0979681df5537c1398e1643d8febefbf6bd8a175181","ssdeep":"1536:wD6iwBGGnXRyNxQpuCpnEZB2sfPEzW6+0ASgSzrT:wD6LgXQpuC8PEM9SLT","tlshash":"d404526e8b04de662fb25388d15cf9eca15ee117c9cd5ca2e2f1cf3440bc9b7215219a","first_seen":"2026-09-17T03:00:43.028449Z","last_seen":"2026-09-17T08:36:52.721514Z","times_seen":24,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/style.css","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.078Z","timestamp":1789616333078,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 00:28:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 3369\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11107,"size_decoded":3747,"mime_type":"text/css","magic":"HTML document, ASCII text","md5":"77f436dc53f71e6e9ffa6cc82d8ad24c","sha1":"b4be8dcfb07ef85661fbdb225b24249e8dc8c44b","sha256":"8b1dc5c063effcf24c3061cf97dc95bcb82506c0244821e83c583dd22bea3e19","sha512":"a81dfadc83e443c0f18f96bd5196e3d6978bd395ab0f92e8ff0907e41fa8ddc9deb5db741596961cdb30d92e30a988916d6197a0df1413361d77f8e94e555e1e","ssdeep":"192:AJoJR3B4ror9YTqjsr/eFX18u+heFXKY+qsBhqSfMgLj276htuxOQCptPMPTEgOh:AJIPc/eFl8CFdxMhY76htu8QCptMPT9y","tlshash":"c93250c667b81918b82f99a47a579faa331c6047820acbbd4fe0101c9ccd1f66672f4d","first_seen":"2026-09-15T13:51:09.749521Z","last_seen":"2026-09-17T03:39:32.720403Z","times_seen":5,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:00.750Z","timestamp":1789616340750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:39:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRC2B4yWM5TUQZhPF4a7tWcyTafbz7SqGHLBiim3AsIDb64QkzCQVc%2BNgk3HEvOnQ5RCoPit1RYZbx0ZmDt9NDxBzd1mR5rq3p8meGfg2zlCxeGcTflsmJNBvlP8hAyH\"}]}\r\ncf-ray: a3c514d1be9f5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":662,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:01.560Z","timestamp":1789616341560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 03:39:01 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3c514d6dcf9b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226146,"size_decoded":31978,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"356357f085aacdb7f9b60985757417f3","sha1":"044d00183164fd860c7c7d845dbe5d5952c642bb","sha256":"2ee26d6e3107cd2854a3ac218cf76e759d3907ed6948b55da7ed7614c4d3446d","sha512":"9c36e2d2ff8ab9d8564f9095e04ec812955a669dd01ab5fa563ee4ab696212196226795e6a1adaa0612ff22a71485358c7695d8e10ec59749e41a3d066fbe6ba","ssdeep":"1536:tYvKFTcstXp1WLFaLYSG+DZHixh1BsNJxZvTM6Rs:tYiFTcsNpwLFatixh1B+JxZvTQ","tlshash":"7c24446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-17T03:00:43.027315Z","last_seen":"2026-09-17T08:36:52.720776Z","times_seen":24,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":6,"connect":11,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:39:01.922Z","timestamp":1789616341922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: http://mail.robinhood-cashback.com/\r\nOrigin: http://mail.robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:39:01 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMKc6gCM0tMDqubmxeGag4zasKjHSMDQnNm%2FHvQbudzjq6aVOZB%2Bn9CEi8e2lZqXeB1yKu4NRzYVWqa1h2viX6Id95jOr7BoOcmitIAXB3hQrXMtmVyiC0TWvPTLqYvm\"}]}\r\ncf-ray: a3c514d90ef65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"receive-office-tear-colours.trycloudflare.com/assets/index--rWyvUo1.js","fqdn":"receive-office-tear-colours.trycloudflare.com","domain":"receive-office-tear-colours.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:04.964Z","timestamp":1789616344964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /assets/index--rWyvUo1.js HTTP/1.1\r\nHost: receive-office-tear-colours.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a3c514ec0e820731-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47008,"size_decoded":35099,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14089), with NEL line terminators","md5":"0c7c8c981bbec8c6f2359ace93b9de1b","sha1":"89a95fe2cc6d52b9f5a178b8d2a9afab47988e71","sha256":"6fefbafc28a4f7e70248b39ec420045da4da06207c59b4bb5d709494427bce21","sha512":"ab5625714936d77e0b75837589352f192a103972c59cee5443c9ce977ea4c48fd0d1e3b9cd557bf475377fdab8af639959bf0889f9bc731b446962c75f1868ee","ssdeep":"768:kEmJJf+MupPS+5vfWqCgsBNLFYRm2H7mRHge4zTjihknr/TmccsZ1NuzVqBQQVRd:kEme9S+vag8NhWmc7s4DRcspu4HVbOUT","tlshash":"fd23e19c29368194a8fc16dd2c2f45ceac7c0f9c64cd5917d02a61b23ad25a708ebd76","first_seen":"2026-09-17T03:00:42.991778Z","last_seen":"2026-09-17T08:33:34.163396Z","times_seen":21,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.265Z","timestamp":1789616345265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\ncf-ray: a3c514ededeb723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5137,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-17T08:36:52.706302Z","times_seen":878,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.395Z","timestamp":1789616345395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 03:39:05 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncf-ray: a3c514eebd1a35a6-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1929,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-17T08:36:52.71397Z","times_seen":875,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtmVjU4MkZOdEdlZWIxQUZ4V3ZqNDRwQnlYWlk3ZEViQ0VmaVlXcUdFbXR6WSIsInN1YiI6IjJkMThkMmQ3Y2RhYTZmMjFjMGI0ZTQwMTE0OGEwZDVhYjg3MzY4OWFkMTMzMTE1ZDk4ZjYyNGUxYzFjNDMxYzIiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTYxNjM0NSwiZXhwIjoxNzg5NzAyNzQ1fQ.WG66FLu6m2KJHWjZ_gRbgLpG32FTEm6CHu1ihZTrUUGjg5gR29YEWdwrKDLdYmmf5pzQOXOUSy4ePbEj0_MBCg\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"3.122.92.245","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://receive-office-tear-colours.trycloudflare.com/?host=http%3A%2F%2Fmail.robinhood-cashback.com\u0026href=http%3A%2F%2Fmail.robinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:39:05.981Z","timestamp":1789616345981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtmVjU4MkZOdEdlZWIxQUZ4V3ZqNDRwQnlYWlk3ZEViQ0VmaVlXcUdFbXR6WSIsInN1YiI6IjJkMThkMmQ3Y2RhYTZmMjFjMGI0ZTQwMTE0OGEwZDVhYjg3MzY4OWFkMTMzMTE1ZDk4ZjYyNGUxYzFjNDMxYzIiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTYxNjM0NSwiZXhwIjoxNzg5NzAyNzQ1fQ.WG66FLu6m2KJHWjZ_gRbgLpG32FTEm6CHu1ihZTrUUGjg5gR29YEWdwrKDLdYmmf5pzQOXOUSy4ePbEj0_MBCg\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://receive-office-tear-colours.trycloudflare.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YtCg5YuQ7rx2rvGzxiI2ow==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 17 Sep 2026 03:39:06 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: Oe4IfuGAB3tW3VcTjaynJzJxnmE=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T17:41:52.790885Z","times_seen":18519253,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":100,"connect":122,"send":0,"wait":25,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.robinhood-cashback.com/ea498b8508.js","fqdn":"mail.robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.robinhood-cashback.com/","date":"2026-09-17T03:38:53.080Z","timestamp":1789616333080,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /ea498b8508.js HTTP/1.1\r\nHost: mail.robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://mail.robinhood-cashback.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 16 Sep 2026 02:24:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 2442\r\ndate: Thu, 17 Sep 2026 03:38:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5470,"size_decoded":2748,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5470), with no line terminators","md5":"cdb3533a9d7e3b12fedb9c3ae08ee9d6","sha1":"077de84056abfd0af7932e0a65aed0330ab2a9df","sha256":"3ef1568a9bc9cf06cff476b2c927e9fdf43b39490a76a9cea8a7043f72431950","sha512":"5a615ba0ab1473f7ba59200961033f7ddac1701eedfa64426206dcc3673b19849f66a2d8c8d80b3edbca71fca76e9990e3102ba364b37c2546ff9c6ecfd0b3f1","ssdeep":"96:ZOkuEimAP0sQJNswieiLrk4sJKfS06v9c5Khw0fCICbC4CvCVCQCp7Kzm0nkm8xg:ZOkwPtQfNiJYKfE9nhw0aluVqVCtAkj6","tlshash":"7fb14258bf90784413e74773632a70aad55b9d5a1a0508cbe700fdc1b9a7e1bd2c9b70","first_seen":"2026-09-17T03:31:52.351906Z","last_seen":"2026-09-17T03:39:32.730925Z","times_seen":3,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":171,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"mail.robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}