{"report_id":"abc9c50e-5b61-41a6-adf9-092e539d0e30","version":0,"status":"done","tags":[],"date":"2026-09-17T03:32:07Z","url":{"schema":"http","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"title":"Robinhood Exclusive Cashback","dom":{"size":21053,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6846)","md5":"5c5cf2ab888e6eddf517f661db605d1d","sha1":"a5ee6c505e492864d9cad57bcb4be9bff24e1fa1","sha256":"0008f3e27520cf48a34b5ac482621594bf4f28fed391ded6c233d056bc8ce1ae","sha512":"37d19f8ebfa476a4fe4621d1495d9d1c77cb15041fb3c75237c36a0646a430282ce9e9e1e72466b30d6cb82067943bd9a87123e8d6c0cc9bd5cd8ffeb07887bc","ssdeep":"384:0z/g/PRvMynJ1ljWW68bI3Ee9j6AupZ7GIxGY+fXHoFoSJdInLGfgHivwaP/9+Yg:O8GEeZ6LZ7RUY+fXoFoSJdr+Yor","tlshash":"b392082261f320315523868d7b976f062e29e003e509c8257bed43998fd6d99edf33ad","dom_hash":"domhashc5f833af15756f67a7f3221df4cbf90f","first_seen":"2026-09-17T03:32:16.278401Z","last_seen":"2026-09-17T03:32:16.278401Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:32:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bsc-dataseed1.bnbchain.org","ip":{"addr":"34.243.96.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":2973508,"first_seen":"2023-08-09T23:52:32Z","last_seen":"2026-09-11T20:55:00.96155Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-15T13:06:09.954433Z","alert_count":0,"request_count":7,"received_data":1228067,"sent_data":4004,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-15T11:06:52.746021Z","alert_count":0,"request_count":7,"received_data":1101751,"sent_data":3836,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"63.188.196.18","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-09-15T13:51:04.659731Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1161,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"robinhood-cashback.com","ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-09-15","domain_rank":0,"first_seen":"2026-09-17T03:32:11.297542Z","last_seen":"2026-09-17T03:32:11.297542Z","alert_count":44,"request_count":11,"received_data":1375314,"sent_data":5643,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"zennnnnnn.xyz","ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-08T18:17:57.412337Z","last_seen":"2026-09-17T03:00:37.196749Z","alert_count":5,"request_count":5,"received_data":1088611,"sent_data":2793,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"geo-organisation-financing-technologies.trycloudflare.com","ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2026-09-17T03:19:41.39869Z","last_seen":"2026-09-17T03:19:41.39869Z","alert_count":0,"request_count":2,"received_data":48614,"sent_data":1369,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9417c4791f3b7e371d8b1b6876d62073","sha1":"255d95ab23430fd3ed72ebf33ccab9b5946031be","sha256":"2519048d6332633cbf176333f69b119545a7f71c742cffb1da2a0cfe8469a6a7","sha512":"cf100108b6d36ea466cbfa4fc569f1874edbd1b145a8711d195e667c466ca87d70ceb5acf609fb7e49c2d35c68ed57fafd913970efdc43bd39f0f532af6792e4","ssdeep":"","tlshash":"96117baa71a7206006d392663bc3a2443814a0033856ecdc7e4d81144fe7ea5d0abb88","size":1011,"data":"","first_seen":"2026-09-15T13:51:09.770348Z","last_seen":"2026-09-17T03:39:32.738707Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-organisation-financing-technologies.trycloudflare.com/assets/index--rWyvUo1.js","fqdn":"geo-organisation-financing-technologies.trycloudflare.com","domain":"geo-organisation-financing-technologies.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c7c8c981bbec8c6f2359ace93b9de1b","sha1":"89a95fe2cc6d52b9f5a178b8d2a9afab47988e71","sha256":"6fefbafc28a4f7e70248b39ec420045da4da06207c59b4bb5d709494427bce21","sha512":"ab5625714936d77e0b75837589352f192a103972c59cee5443c9ce977ea4c48fd0d1e3b9cd557bf475377fdab8af639959bf0889f9bc731b446962c75f1868ee","ssdeep":"768:kEmJJf+MupPS+5vfWqCgsBNLFYRm2H7mRHge4zTjihknr/TmccsZ1NuzVqBQQVRd:kEme9S+vag8NhWmc7s4DRcspu4HVbOUT","tlshash":"fd23e19c29368194a8fc16dd2c2f45ceac7c0f9c64cd5917d02a61b23ad25a708ebd76","size":47008,"data":"","first_seen":"2026-09-17T03:00:42.991778Z","last_seen":"2026-09-17T08:33:34.163396Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"geo-organisation-financing-technologies.trycloudflare.com","domain":"geo-organisation-financing-technologies.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1b782597edee030df78eea6aded8c24d","sha1":"fddf3059ede6ac07718237fbd1e99e9d706d680e","sha256":"85bfcb5c675828795df5ea2e98d6c951399e01ae71854f17962d369bedaee694","sha512":"1961d541bb9d43e6fbc863f6415916d921b7f630f408841f121357584db56a95f97fd19c1ab96fce42a6c8cc623f2f1ef85853c0d3bd4a5874c2179478a42f40","ssdeep":"768:s+oQSEuNvn2hN/l4afrR7hyvye2dihSfkmm2CgFwri2TyCs3zjT00NMNBk0U1Z57:s+oQS3NoxJ3AmWDxF7oGbQ99RwWh","tlshash":"aa43c59163d0ad10274b6fbbb72f71e5e51b199a348488cfd604bd547aea213ebe0930","size":56445,"data":"","first_seen":"2026-09-17T03:00:43.060729Z","last_seen":"2026-09-17T08:33:34.197608Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-17T08:36:52.705279Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-17T18:04:23.010456Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5287d887452daa2da5c0b54e1074418a","sha1":"e6e7f92df6351808651bf3b5e4dd1838ee623b33","sha256":"ddac9d9d0c6bcdc243b4e93e66343d915d9ef20f34e2d8c4c294b9933321c2e3","sha512":"7deb3993a37adbc7d51b130e868cc0da359fbc26e39507a77e44b2de0ebbae8526cdbb56b293b776ca90d0ba90bc184239ae6b15044836e9938393400a152386","ssdeep":"192:0GbhPyW1ziTC0nm5x9hYZqh6PMdcWzGdU3WrLHEi5oj:gnm5x9hYMh6P2c23WPEi+","tlshash":"9df13813319ab54a11d6033e365963e6c4aadc06da8ac84af388ddacb4dd9937a0c5f4","size":8024,"data":"","first_seen":"2026-09-17T03:32:16.297952Z","last_seen":"2026-09-17T03:32:16.297952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1af73cf16b140946d772c45617ed6b5a","sha1":"4139479d7e072a1c490f801bd6dbd4454f5abdbb","sha256":"67e09546fe92e3f941f1c754bf1bd04b24a7bebf079f5708d4482e4205050de1","sha512":"4577436ae1c18bd35fb17a1dba86dc4d8aed681e343836ab9d1b92fe1b4094b697272df7c0f305c50bfa74c9fa0994f2282193a83c772de50ab9e60d585a5a36","ssdeep":"24576:1rLgGoy02HZZXbI1+86wifQlrsprzvQomGK:1l+tZ1KLK","tlshash":"4335f2994833427a26c842f86c1f0fc83da86fdce094a73b8575d4f677856ef10e6962","size":1084933,"data":"","first_seen":"2026-09-17T03:00:43.062207Z","last_seen":"2026-09-17T08:36:52.726331Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-17T18:04:22.996102Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-17T18:04:23.016583Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/ea498b8508.js","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdb3533a9d7e3b12fedb9c3ae08ee9d6","sha1":"077de84056abfd0af7932e0a65aed0330ab2a9df","sha256":"3ef1568a9bc9cf06cff476b2c927e9fdf43b39490a76a9cea8a7043f72431950","sha512":"5a615ba0ab1473f7ba59200961033f7ddac1701eedfa64426206dcc3673b19849f66a2d8c8d80b3edbca71fca76e9990e3102ba364b37c2546ff9c6ecfd0b3f1","ssdeep":"96:ZOkuEimAP0sQJNswieiLrk4sJKfS06v9c5Khw0fCICbC4CvCVCQCp7Kzm0nkm8xg:ZOkwPtQfNiJYKfE9nhw0aluVqVCtAkj6","tlshash":"7fb14258bf90784413e74773632a70aad55b9d5a1a0508cbe700fdc1b9a7e1bd2c9b70","size":5470,"data":"","first_seen":"2026-09-17T03:31:52.351906Z","last_seen":"2026-09-17T03:39:32.730925Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"86628a3a35eca553706a3a7b45f77efb","sha1":"1b153bcfb8758aac7ddaae208b33037aa83b242c","sha256":"f21286e6c0bb1965774b1bcf6ab95e6d8d3a17d97f3dc8ef696c3d471aed7957","sha512":"013a67bd1abcbdef3d0f118418a20e04750e79c90da1448a5c97044badc328c26ed5a82cb2dd79b32cf154be6701864ab24d348db7c2806e7cba5b0242ac4bff","ssdeep":"24576:BJw0dDhgNDThIQq8li6//u/F+xNlkYoI+DydsrFL5OaB3XXHzd0m0Oy0W5pgAUcw:BOWmhIQMF+xNlkYoI+OiL5OaBHXHzd0W","tlshash":"9175c80063d06954234b8fbb772bb5e6f81e096f78580c8fe614bc646ae9717fad4930","size":1571604,"data":"","first_seen":"2026-09-17T03:00:43.053137Z","last_seen":"2026-09-17T08:36:52.730462Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"geo-organisation-financing-technologies.trycloudflare.com","domain":"geo-organisation-financing-technologies.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-09-17T08:33:34.216032Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-17T18:04:22.99674Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-17T18:04:23.022559Z","times_seen":869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-17T08:36:52.712557Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.082Z","timestamp":1789615897082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fcd87f783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226146,"size_decoded":32096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"356357f085aacdb7f9b60985757417f3","sha1":"044d00183164fd860c7c7d845dbe5d5952c642bb","sha256":"2ee26d6e3107cd2854a3ac218cf76e759d3907ed6948b55da7ed7614c4d3446d","sha512":"9c36e2d2ff8ab9d8564f9095e04ec812955a669dd01ab5fa563ee4ab696212196226795e6a1adaa0612ff22a71485358c7695d8e10ec59749e41a3d066fbe6ba","ssdeep":"1536:tYvKFTcstXp1WLFaLYSG+DZHixh1BsNJxZvTM6Rs:tYiFTcsNpwLFatixh1B+JxZvTQ","tlshash":"7c24446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-17T03:00:43.027315Z","last_seen":"2026-09-17T08:36:52.720776Z","times_seen":24,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":3,"connect":7,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.468Z","timestamp":1789615897468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 752\r\ncf-ray: a3c509ff3f4c712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10670,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-17T18:04:23.010456Z","times_seen":737,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtvVHNzc25uNzFvRldKeFFoallUWFhvcHBRV1JrUGhpVGl6elI1S3lnTUdpViIsInN1YiI6Ijg0NDk2YWI2NzU5N2FmN2JkZjJmYjdiMWI1YThjNWFlM2M3MTJiYzk2MTNhZjJkNDlkM2Y5ZmI3NDUxOWQ3ZDAiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTYxNTg5NywiZXhwIjoxNzg5NzAyMjk3fQ.XOmkQ7lSZNJEcsmXcpc0nDRQHGlTrwnGUe7wSvpl2vh9DL7kqlGuKXXmUT-V7rUIDkxk3jx2HCIyNJ8gnDNyBA\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"63.188.196.18","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.812Z","timestamp":1789615897812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtvVHNzc25uNzFvRldKeFFoallUWFhvcHBRV1JrUGhpVGl6elI1S3lnTUdpViIsInN1YiI6Ijg0NDk2YWI2NzU5N2FmN2JkZjJmYjdiMWI1YThjNWFlM2M3MTJiYzk2MTNhZjJkNDlkM2Y5ZmI3NDUxOWQ3ZDAiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTYxNTg5NywiZXhwIjoxNzg5NzAyMjk3fQ.XOmkQ7lSZNJEcsmXcpc0nDRQHGlTrwnGUe7wSvpl2vh9DL7kqlGuKXXmUT-V7rUIDkxk3jx2HCIyNJ8gnDNyBA\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TFT6/lSExqMpyHrKTN+11w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 17 Sep 2026 03:31:38 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: 477h5ldTL+1AuLj5gEV/hHtdHEY=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":0,"dns":344,"connect":362,"send":0,"wait":24,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/k46o1gntwsf.4lhk8rma.js","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.787Z","timestamp":1789615894787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /k46o1gntwsf.4lhk8rma.js HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 17 Sep 2026 03:31:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":1510,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-17T18:37:05.424146Z","times_seen":155493,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.233Z","timestamp":1789615897233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0R1FShnlguA71j6MoIRDRSHd9CwSkeL%2FSIWTiXTV8kOsufY%2BGZcpuHi2pourRBMkj3A9IePfYsSjzuM0iHPDZS8dG4nQxGBMysad7bsAy1ITw2n%2FvnlZKiXDddTwbXy\"}]}\r\ncf-ray: a3c509fdb8ad5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/images/image_8f757c8affb66fa1bcc4f49f66d8773825c1f31b.png","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.793Z","timestamp":1789615894793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /images/image_8f757c8affb66fa1bcc4f49f66d8773825c1f31b.png HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35670\r\ndate: Thu, 17 Sep 2026 03:31:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35670,"size_decoded":35987,"mime_type":"image/png","magic":"PNG image data, 1440 x 282, 8-bit/color RGBA, non-interlaced","md5":"d544af1ce573d0f43069de47ea1b31ae","sha1":"8f757c8affb66fa1bcc4f49f66d8773825c1f31b","sha256":"26f3c0f37cedad3ad22448f2aee3e9fe8ac359e62aec8f03b8f9556130389516","sha512":"e636850dd389341aa777ec780d82211eefdc3808ddc0525c315fa63acb41b00baf3ee024dd9d1ec84d26e30b9de5b54e9d7b52b0a9f0e2f855d4f27a0bbee7f6","ssdeep":"768:a9OPbx3Fr6O5l078/OA2RqRoJeTLpHxigITX4PXGCu64SBrO4:A0b996O5Q8mANoEbigITXUXf64","tlshash":"c8f2e14e640be443cf8b0d664dfaa17b4e3a852ee882bdfd15f69aadfd4210500e11dd","first_seen":"2026-09-08T18:23:29.295607Z","last_seen":"2026-09-17T03:39:32.701286Z","times_seen":10,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:36.048Z","timestamp":1789615896048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfYizL0np3m3raXL6RF9btg%2BsnAp%2BkEYqygg7n%2B7qZjv2Vz%2BZhfbLsmYKLWmj11glL24qt0cI1tBmhM9xyIuoVZFN5u1A70nMFULzXOqW5Z%2BCf2PZyjR09Bgx8Na8kUT\"}]}\r\ncf-ray: a3c509f668995695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":670,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":2,"connect":12,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.325Z","timestamp":1789615897325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fe4894783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222558,"size_decoded":31748,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ee77d3966087720e6a9542b94f41d886","sha1":"ffe6d608b939aa80680fbfd8d5e37d2aa3ee6e9e","sha256":"101547bb68615764667ef788d7a89097d4beac3702941831d242b8dd7c3fe363","sha512":"7397f623b7b505ad59ff2a960eb9677b177476d50f7925dd73ff80194e03d045b35bd2a8ca213ae58caa2d443a821e09d0879e2a962ab49dc98ddfd3c3ec9877","ssdeep":"1536:pbinZhimNX3XFQ9LujpygGWudQT6bjzeFedLx:pWnZhimNnEC9B3udQCjzeFedN","tlshash":"3724656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-17T03:00:43.045039Z","last_seen":"2026-09-17T08:36:52.704343Z","times_seen":24,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.471Z","timestamp":1789615897471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 752\r\ncf-ray: a3c509ff3f4f712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3888,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-17T18:04:22.996102Z","times_seen":876,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:36.361Z","timestamp":1789615896361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csI9kjMZNQSvAAyjAeHJMFcQGLXuxAV2NtRnntLvMeq7QkcIeZv2oUKTI4NmNO2bpUneUG4hdE5Pqu9t%2BPiUJW1VroBdytDZnlm2%2BF98uNxCpwWKNNK81bIj1%2FAdbyOW\"}]}\r\ncf-ray: a3c509f848a05695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":666,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.509Z","timestamp":1789615897509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 752\r\ncf-ray: a3c509ff7f54712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":708,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-17T18:04:23.022559Z","times_seen":869,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"geo-organisation-financing-technologies.trycloudflare.com","domain":"geo-organisation-financing-technologies.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.085Z","timestamp":1789615897085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: geo-organisation-financing-technologies.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: text/html\r\ncf-ray: a3c509fce921a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":768,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f3b43e888d375e471fde6a217023a3fe","sha1":"c0c957abc4b35426442aced5ec15732ae5dc6bf2","sha256":"435bba95b7b017e5c9645e2ab33f142e67a6e80360892508001e28c7491b35cc","sha512":"a0c2ea506bcb28f17777f4bb4c3505583d2b49a588055b2239083c309a798c330c3fc751591a360d74da3c15b4b775557bac98dbbe0c1cdb2732f0b2a40bf8c3","ssdeep":"","tlshash":"8111ad850d57407105f78a9a3b5f7f05b7a6924a40c4c5003ffae2b6afa3e4bc809ad8","first_seen":"2026-09-17T03:00:42.990424Z","last_seen":"2026-09-17T08:33:34.102185Z","times_seen":21,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":1,"dns":5,"connect":1,"send":0,"wait":63,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:31:34.072Z","timestamp":1789615894072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Wed, 16 Sep 2026 02:50:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7329\r\ndate: Thu, 17 Sep 2026 03:31:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13741,"size_decoded":7611,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6847)","md5":"e56b28a72691d72abb8c708edfcedb70","sha1":"44ee987ba4ad1aaa65b9f95997e5a088b4e1a4fa","sha256":"4c5512db472881063fa3bc0ad98e8fb91d480f17ffd4190280f9354ca00b5552","sha512":"cc6b215934a18acccc3cbd9f3785e7c6a5d74607a28eb204d602bbdc98141657effa1dada901e70fe54fcfba4337c62a0223c124882d1f931b3547601e009b9c","ssdeep":"384:J2lT8bI3Ee9j6AupZ7GIxGKsnLGfgHiH/bYP/9+V:28GEeZ6LZ7RUKq+V","tlshash":"93522a65f0f64032116283897657bb162e48f003d6599051b7ad8be80fe6ea1ecb32ce","first_seen":"2026-09-17T03:31:52.359775Z","last_seen":"2026-09-17T03:39:32.695166Z","times_seen":3,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":12,"connect":176,"send":0,"wait":176,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/style.css","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.781Z","timestamp":1789615894781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 00:28:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2729\r\ndate: Thu, 17 Sep 2026 03:31:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11107,"size_decoded":3089,"mime_type":"text/css","magic":"HTML document, ASCII text","md5":"77f436dc53f71e6e9ffa6cc82d8ad24c","sha1":"b4be8dcfb07ef85661fbdb225b24249e8dc8c44b","sha256":"8b1dc5c063effcf24c3061cf97dc95bcb82506c0244821e83c583dd22bea3e19","sha512":"a81dfadc83e443c0f18f96bd5196e3d6978bd395ab0f92e8ff0907e41fa8ddc9deb5db741596961cdb30d92e30a988916d6197a0df1413361d77f8e94e555e1e","ssdeep":"192:AJoJR3B4ror9YTqjsr/eFX18u+heFXKY+qsBhqSfMgLj276htuxOQCptPMPTEgOh:AJIPc/eFl8CFdxMhY76htu8QCptMPT9y","tlshash":"c93250c667b81918b82f99a47a579faa331c6047820acbbd4fe0101c9ccd1f66672f4d","first_seen":"2026-09-15T13:51:09.749521Z","last_seen":"2026-09-17T03:39:32.720403Z","times_seen":5,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/ea498b8508.js","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.785Z","timestamp":1789615894785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /ea498b8508.js HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 16 Sep 2026 02:24:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2198\r\ndate: Thu, 17 Sep 2026 03:31:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5470,"size_decoded":2486,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5470), with no line terminators","md5":"cdb3533a9d7e3b12fedb9c3ae08ee9d6","sha1":"077de84056abfd0af7932e0a65aed0330ab2a9df","sha256":"3ef1568a9bc9cf06cff476b2c927e9fdf43b39490a76a9cea8a7043f72431950","sha512":"5a615ba0ab1473f7ba59200961033f7ddac1701eedfa64426206dcc3673b19849f66a2d8c8d80b3edbca71fca76e9990e3102ba364b37c2546ff9c6ecfd0b3f1","ssdeep":"96:ZOkuEimAP0sQJNswieiLrk4sJKfS06v9c5Khw0fCICbC4CvCVCQCp7Kzm0nkm8xg:ZOkwPtQfNiJYKfE9nhw0aluVqVCtAkj6","tlshash":"7fb14258bf90784413e74773632a70aad55b9d5a1a0508cbe700fdc1b9a7e1bd2c9b70","first_seen":"2026-09-17T03:31:52.351906Z","last_seen":"2026-09-17T03:39:32.730925Z","times_seen":3,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/fonts/font_78eae8a823f461192b4df2d67d7eaa818cf09b5a.ttf","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.988Z","timestamp":1789615894988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /fonts/font_78eae8a823f461192b4df2d67d7eaa818cf09b5a.ttf HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:35 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 324820\r\ndate: Thu, 17 Sep 2026 03:31:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":324820,"size_decoded":325137,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"a32ace5dba8400232b84bc017dcc38ef","sha1":"78eae8a823f461192b4df2d67d7eaa818cf09b5a","sha256":"1b08e7fc267a5c7e1d614100f604b83e7e8a0be241f0f288faa2b3ac93a683ba","sha512":"7885b898af0ce9b260017dfa483ef7641bdab7383421f51fe7215840eeb9c0a0eed9a8ce28f1f1c88590ffd6a76deedfc37e106ee1e1094af7404966fe41d251","ssdeep":"6144:Jxe0kGmW8XF53q+DREk6wPtE+nr1kfmq+HpvaQCRa14UYE0o:/e0kGmW0FGkZdkCvyR+0o","tlshash":"98645b27e723935ddb452d35cfa2c3a43775bca1bc57a20b70aa3a94c88b1b45dc48e4","first_seen":"2024-08-15T00:58:33Z","last_seen":"2026-09-17T03:39:32.705911Z","times_seen":1394,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":522,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"34.243.96.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:35.857Z","timestamp":1789615895857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 17 Sep 2026 03:31:35 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":34,"send":0,"wait":35,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.470Z","timestamp":1789615897470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 752\r\ncf-ray: a3c509ff3f4d712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5171,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-17T18:04:22.99674Z","times_seen":879,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/fonts/font_1048573ec372a0c4a60bd3d5b3ab3b82bc3973da.ttf","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.990Z","timestamp":1789615894990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /fonts/font_1048573ec372a0c4a60bd3d5b3ab3b82bc3973da.ttf HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:35 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326048\r\ndate: Thu, 17 Sep 2026 03:31:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326048,"size_decoded":326365,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"84cf795ee940a39423fbee3dad4017c1","sha1":"1048573ec372a0c4a60bd3d5b3ab3b82bc3973da","sha256":"e7a1aaf7eda9f2fad4131725fa556265ec75ca7b2d756260173a040363e8d4f7","sha512":"e276355be5d939caa93c6417048240550d47bf9b5375e54955e9855acf1647a36b1ecf9084a0817be92cfa8266f3b32d229691f467f838575bc2a904a14efb4b","ssdeep":"6144:Eb9pkGmW8XFh3q+D2aLMs9lE+nr1kPLN5W6+8/WYJ0Km/ZpDfik:EkGmW0FyaLfdkPLm6+8u3ik","tlshash":"23645b2bf723d35dd7052c39cab2c7a437757ca1bc46a10bb0aa3a95cd9b0b019d49e4","first_seen":"2024-08-15T00:58:32Z","last_seen":"2026-09-17T03:39:32.680152Z","times_seen":930,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/k46o1gntwsf.4lhk8rma.js","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.997Z","timestamp":1789615894997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /k46o1gntwsf.4lhk8rma.js HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 17 Sep 2026 03:31:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1510,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-17T18:37:05.424146Z","times_seen":155493,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.220Z","timestamp":1789615897220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fda88a783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165456,"size_decoded":28157,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cc746627b65cab05eee177205c7bc16","sha1":"053729e37c6abeea5bc4ba71869bebb51082253f","sha256":"f912815457ffe426e31eab46ebafba6aed1db4b6e0a58a9a2720acedad9d8d65","sha512":"f31cf091d7f1098c36879b4fc2b70f9bfe14eec9d8c9bb06bb09d64467882819b0bb6e9f95f94891ebf56f73b483cd3c0ae9b9aeab9a55c9610df789ab30ebb0","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF1Iiz5K/naLu49QmqgpeJ:ZFVz06UZgEx8eIiz5K/n6qg4J","tlshash":"5ff3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-17T03:00:43.033579Z","last_seen":"2026-09-17T08:36:52.71335Z","times_seen":24,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.350Z","timestamp":1789615897350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fe7896783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190142,"size_decoded":31609,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"63b7bd3c11c6a14a1d03b49e804038c9","sha1":"8cc865aeabb00541e66ce921fc249e155a8882f8","sha256":"d59db9618c83ad71f28e21378dda80348d724f645cc2a3c38c9f033ae373ab8b","sha512":"ca9d94cc8ffb84fef9fda7562291a82861252a4a162e8b71f11d105c748092f5edc25c102f7c6bc0f2fdc4c79995ead5d64a6fc69cdf4d304001e3109a979c32","ssdeep":"1536:KHtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8y0W:KvRWzd3T7waCU15Br9LmW0W","tlshash":"7504536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-17T03:18:35.323124Z","last_seen":"2026-09-17T08:36:52.722371Z","times_seen":22,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.433Z","timestamp":1789615897433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geo-organisation-financing-technologies.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 752\r\nlast-modified: Thu, 17 Sep 2026 03:19:05 GMT\r\ncf-ray: a3c509ff0f4a712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":766,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-17T08:36:52.705279Z","times_seen":216,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:36.359Z","timestamp":1789615896359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"fgEL6c-XcSOnAtVh1_A9\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:36 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MqftXPVCIG%2BkqkseExqHqgCKPV2q9ektY%2BiAHXJwxMDj6zIi5aeV70GRflI%2FQGoNCC63I%2Ft05VK3sQcQ7cjyJAKeV3cHH7P4L8Lc%2FAW8qYRhuLqdeFzN2rioCf4O3y%2B\"}]}\r\ncf-ray: a3c509f888a15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084907,"size_decoded":833223,"mime_type":"application/javascript","magic":"data","md5":"85a375f21f8709b3298ba38fcf99d9e0","sha1":"51ce0f677cf955897d8a93fdff46c7b681ada312","sha256":"b0b8b190199e6687232ee3531d4ed854246bf8c38dddf68d241206ec766e4e01","sha512":"07b48ddba42d649080ff71d19623f44f22b9bff5021b2ee00245b200d86155b3774035f45f1ba5eed1c7a6d65b6a28f0e37bbe1048128ad683327eed33051791","ssdeep":"24576:OrLgGoy02HZZXbI1+86wifQlrsprzvQomO:Ml+tZ1KN","tlshash":"0825f2994833427a26c842f86c1e0fc83de86bdce058a73b8575d4f677856ff10e6962","first_seen":"2026-09-17T03:20:40.673552Z","last_seen":"2026-09-17T07:31:45.092938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.243Z","timestamp":1789615897243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fdc88d783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183275,"size_decoded":29656,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"281564a8561851ae6e12be4f359acdb9","sha1":"3fab59cf6024e64043fcdf449795b7058466debf","sha256":"522b9886d8cdf9da7daa3aae81887759367e634af6672859f503719a5ccf3b6d","sha512":"e151e1bb41ccb9237ceb15f2f424b1bdfdb93d7bb72f02d51a120816c84c13f93e7a2579dc398da4d8fdf0979681df5537c1398e1643d8febefbf6bd8a175181","ssdeep":"1536:wD6iwBGGnXRyNxQpuCpnEZB2sfPEzW6+0ASgSzrT:wD6LgXQpuC8PEM9SLT","tlshash":"d404526e8b04de662fb25388d15cf9eca15ee117c9cd5ca2e2f1cf3440bc9b7215219a","first_seen":"2026-09-17T03:00:43.028449Z","last_seen":"2026-09-17T08:36:52.721514Z","times_seen":24,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.267Z","timestamp":1789615897267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fde88e783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":28031,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21c02aadfaa8cf09c77ca410f3c3f75d","sha1":"60e552132fc6999ccf5f70994725f2cac6bbaf09","sha256":"80b2a0464dcdff2e416bea02aed8a79fba6fc1ae8785ff5a5b2e42984b6690ba","sha512":"c6e42cd0ab4a7f55c5d09c499085689df2982ac63645fe30a13a851c586c124e1502a19852be30e6042e67f54d34c83ae31be2d43bbe8bf94594ba3512ddd99b","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9jb:Gu+4PCuielkAnaK/p9jb","tlshash":"69f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-17T03:00:42.993919Z","last_seen":"2026-09-17T08:36:52.703037Z","times_seen":24,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.472Z","timestamp":1789615897472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 752\r\ncf-ray: a3c509ff3f50712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381252,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-17T08:36:52.712557Z","times_seen":215,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.496Z","timestamp":1789615897496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://geo-organisation-financing-technologies.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"PROD\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 751\r\ncf-cache-status: HIT\r\ncf-ray: a3c509ff5f52712a-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1938,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-17T18:04:23.016583Z","times_seen":876,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/fonts/font_b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc.ttf","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.990Z","timestamp":1789615894990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /fonts/font_b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc.ttf HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:35 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326468\r\ndate: Thu, 17 Sep 2026 03:31:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":326468,"size_decoded":326785,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"c59d7314123c3b770bfbbd994215805c","sha1":"b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc","sha256":"b37284b5701b6b168dfc770aa1a4ac492106422fd3ba76bc7641e37434e8019c","sha512":"30ca9372127d8269c5697175ddf4b0e5b3f903b556c6c15673c8c6cd09d8c318e048fe4879acd4d28f510ce6ba1c02db8b2f71374bfde7ce4a3263a94a97ebc4","ssdeep":"6144:MFccVkGmW8XFu3q+DXiMD3E+nr1k42hEysvzVwcZ2P+U3j6jCf:MlkGmW0Fyiodk42hEysvqcZifXf","tlshash":"6c645a1bf722935de6422c38cab2c7a437717ca1bd56e20b749b7b94cd9b0b418c45e8","first_seen":"2025-09-18T00:55:20.188069Z","last_seen":"2026-09-17T03:39:32.707959Z","times_seen":705,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geo-organisation-financing-technologies.trycloudflare.com/assets/index--rWyvUo1.js","fqdn":"geo-organisation-financing-technologies.trycloudflare.com","domain":"geo-organisation-financing-technologies.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-17T03:31:37.214Z","timestamp":1789615897214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /assets/index--rWyvUo1.js HTTP/1.1\r\nHost: geo-organisation-financing-technologies.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geo-organisation-financing-technologies.trycloudflare.com/?host=https%3A%2F%2Frobinhood-cashback.com\u0026href=https%3A%2F%2Frobinhood-cashback.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a3c509fd99c7a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47008,"size_decoded":35099,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14089), with NEL line terminators","md5":"0c7c8c981bbec8c6f2359ace93b9de1b","sha1":"89a95fe2cc6d52b9f5a178b8d2a9afab47988e71","sha256":"6fefbafc28a4f7e70248b39ec420045da4da06207c59b4bb5d709494427bce21","sha512":"ab5625714936d77e0b75837589352f192a103972c59cee5443c9ce977ea4c48fd0d1e3b9cd557bf475377fdab8af639959bf0889f9bc731b446962c75f1868ee","ssdeep":"768:kEmJJf+MupPS+5vfWqCgsBNLFYRm2H7mRHge4zTjihknr/TmccsZ1NuzVqBQQVRd:kEme9S+vag8NhWmc7s4DRcspu4HVbOUT","tlshash":"fd23e19c29368194a8fc16dd2c2f45ceac7c0f9c64cd5917d02a61b23ad25a708ebd76","first_seen":"2026-09-17T03:00:42.991778Z","last_seen":"2026-09-17T08:33:34.163396Z","times_seen":21,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.232Z","timestamp":1789615897232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 8f01ac96a6db2a2704155544634c9b1e\r\nContent-Length: 1316\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhasCj41TGgGPjC346nJeDr9oMX%2F94WAj9ANcHeyQSnLiiI8Due3r6OoulwwNqXqMGEx6VAy1%2FnTrkdrya9ezPRVUNprSFt3woGCiiIi1eHGQlHPRPF9OfElmeoIsOSW\"}]}\r\ncf-ray: a3c509fe08af5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":961,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"597ea764d9b218156b4590910eb1557f","sha1":"a718a035197952f40da0b418d8597bf9017ab193","sha256":"159e41a5e257bca1f915f47359bf58fb874afe384e7ca1e7ca552fc31ddf237a","sha512":"b6d3e0f375370fdb0bae45dcde8caa4fb5f648c9efbe869f406e7e379d76b9244330ad85792e596bf00057c0ccb598deab7e8dceabbbc3e86eebf445203d84f0","ssdeep":"","tlshash":"37d02bb36266bd2d521a0851b4d3f7612e706ec151814e6505a010754e999a53b3a425","first_seen":"2026-09-17T03:32:16.293304Z","last_seen":"2026-09-17T03:32:16.293304Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:37.374Z","timestamp":1789615897374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinhood-cashback.com/\r\nOrigin: https://robinhood-cashback.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:31:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c509fe9897783d-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 24\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Thu, 17 Sep 2026 03:31:13 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67158,"size_decoded":12274,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b1665b3c0e8510100d0f59aae33b408","sha1":"7ef23980c06e96bc18430ef5b420ba4089d767c7","sha256":"1bde739252b0158b71fe7ce27e40d64de24ebbcc417a98fe896c00b23e0f3d90","sha512":"b184a9134b27d66bb7098dbe4dcfdebae57483d59db81caff1ade281eefc3961054ca293acbcc510bf5543391dd856379778bb458a1cbb702987b578922ee0e0","ssdeep":"384:x+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW9AJUlpujdQ4yMup8:BcEv+U1lryV6w+5WCFjrI8","tlshash":"3663946b8f04ee762bb2138d515c79eca64f2117cdc99cf6e2d1cf1440b4af7226219a","first_seen":"2026-09-17T03:00:43.042129Z","last_seen":"2026-09-17T08:36:52.723174Z","times_seen":24,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/fonts/font_78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73.ttf","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:34.992Z","timestamp":1789615894992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /fonts/font_78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73.ttf HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:35 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 325304\r\ndate: Thu, 17 Sep 2026 03:31:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":325304,"size_decoded":325621,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"eb0312411b133c48049ac630ab7f1fec","sha1":"78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73","sha256":"8c883f63b2c4157d997319f2c8bc6995ed4357ef371940d31ca159004a4aae63","sha512":"d79527b4f0e7b43908d6ca69e104f9ec464023e9f5767f62decb532318f36a0a4b044cde66dd96a9f1eb0b2c4a1c82134dfc8d5c6f9b7ac1ef491454e63edf9b","ssdeep":"6144:LqBkGmW8XFE3q+DUe9MS3E+nr1kBCJWWUmQEEAwlokfVo7GiPKU3+OaT7Dfs:KkGmW0Fve9Rdk8WWU30KU0k","tlshash":"01646a27f723d35dd6462c38cbe2c3a033797ca1bc56a20b745a3a95ce9b1b419c45e4","first_seen":"2024-12-14T17:19:05.431584Z","last_seen":"2026-09-17T03:39:32.718066Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":522,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-cashback.com/images/image_ff4f12270a4e8b9373e76524ca6340ab5edd0a9b.png","fqdn":"robinhood-cashback.com","domain":"robinhood-cashback.com","tld":"com"},"ip":{"addr":"68.65.122.243","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinhood-cashback.com/","date":"2026-09-17T03:31:35.971Z","timestamp":1789615895971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinhood-cashback.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Tue, 15 Sep 2026 20:15:27 GMT","end":"Thu, 01 Apr 2027 20:23:55 GMT"},"fingerprint":{"sha1":"6F:29:80:95:0A:29:FC:4B:8D:0D:F9:C1:55:A3:CB:BB:7F:52:A9:71","sha256":"BE:BE:03:B4:50:5D:09:4F:A7:15:0D:F4:F5:C5:7B:56:F3:8C:5B:A2:D5:52:93:14:D6:BE:D7:4F:C7:89:B4:64"}}},"request":{"raw":"GET /images/image_ff4f12270a4e8b9373e76524ca6340ab5edd0a9b.png HTTP/1.1\r\nHost: robinhood-cashback.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinhood-cashback.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 03:31:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 836\r\ndate: Thu, 17 Sep 2026 03:31:36 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":836,"size_decoded":1151,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"30d774e3c1c151961d96907db8677b11","sha1":"ff4f12270a4e8b9373e76524ca6340ab5edd0a9b","sha256":"5e86fe428e28d11c4db11f7353262ac660ab6a80d728adc68b839951fdb675e2","sha512":"0439b347aac3d6d2fe2b489acdf01dbfa97624436770eec93441be0a60c1852a1a3c6ef7acdb23486082be13d63044b4fff3a83f6461a4d4c27232c17f09cc13","ssdeep":"","tlshash":"2a01d693ce0104b5e75b074cc5c44916f93c2c95af642fab8d4e900d40801851dbfba3","first_seen":"2026-09-08T18:23:29.302203Z","last_seen":"2026-09-17T03:39:32.690828Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"robinhood-cashback.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}