{"report_id":"be46effa-b8dc-4bca-8bc4-2c238f9bdb55","version":0,"status":"done","tags":[],"date":"2026-09-02T02:19:13Z","url":{"schema":"http","addr":"topcashback.cam/","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"172.67.185.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"topcashback.cam/#/","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"title":"topcashback.cam/#/","dom":{"size":195931,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40058)","md5":"99f5dad9f4cc399a07100db98f8eb718","sha1":"447feb86543d058da79ab6b5cfae071dd6d7b2d0","sha256":"d21b227e6b63d2d6bf197d0f7f611e39a8b9ba2efa4dc9250434d35ad17e72aa","sha512":"35096074aa82d55b91479daa7ba2c22154000eba88283e819eb80af77eb964ca1309775df52126c51496b5a9f7f8e60f8956af2dfc678a48b7d6ec701a801f67","ssdeep":"3072:2sp0NVr7fnaM/51fuPlIHGvXNWPf1f4yH9sUnbauJ9BxEuMa8Qc1tblK1mklU5QJ:Orr7fnFlHh9Af3Rkn/G/T4Es1UK96vGZ","tlshash":"1b14b5a2b689189dab37c8c2d185b77db96f7e75c2028cc2e71223398fd16d3221571d","dom_hash":"domhashe758a0936af88f7a4d96c3e690c39e18","first_seen":"2026-09-02T02:19:17.701153Z","last_seen":"2026-09-02T02:19:17.701153Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"topcashback.cam/","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"172.67.185.113","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T02:19:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"admin.topcashback.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"topcashback.cam","ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T02:00:07.949831Z","last_seen":"2026-09-02T02:00:07.949831Z","alert_count":0,"request_count":15,"received_data":3369100,"sent_data":7470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"admin.topcashback.cc","ip":{"addr":"103.75.118.227","port":443,"asn":136258,"as":"BrainStorm Network, Inc","country":"Japan","country_code":"JP"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-09-02T02:00:07.954569Z","last_seen":"2026-09-02T02:00:07.954569Z","alert_count":5,"request_count":5,"received_data":273480,"sent_data":2935,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-08-28T22:48:01.920941Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/pages-grab-index~pages-home-index.81d0834e.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52736a8bb57049fe0ba6a9cb78df3e49","sha1":"8ed4a9a386d4aaf955fd3a1ca37a06751985b761","sha256":"667ffe807980fe14b66d081010239ed41b43b631d89d68e5348724dd6d486df1","sha512":"3ea8ad3682e12bb79570da267fbc47a678dcb7b1e46460e74b5fd484aec006df2aaa8ac0555947a90fb380daaba1a72acc7f106f1f78781495f0b990675d0ec9","ssdeep":"768:bj4CDeRh4Odeihj2ptHU9A8SPNknxZxd8/10neY0i:bj4CiRh4Okihj2ptHU9A8SlknxZxdM12","tlshash":"32d20725b0c7e06b4ac3546411ab560aa0377e58d821f5d4e7b1b6f70deba8f132af1c","size":31104,"data":"","first_seen":"2026-09-02T02:00:14.514185Z","last_seen":"2026-09-02T02:19:17.714413Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/pages-home-index.25727b02.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a2a31409ab291df3a3cf0fa50a1e517","sha1":"3f8a5ac8bda4b5c0cdb02981709f16a2fd291122","sha256":"7c70a7594f9345b1282b28980253b5827760159539d316fe4e3f6b8bdd1da26a","sha512":"7e53874135e1fbc947d9efcade6fe72080931c7031626fee8122eea813a3d10e2926e9bc61ab64df01806dc65a80145817e311a50878a783f0fd619b76e1688d","ssdeep":"384:86lNG8Uk+OFW7hmxrD6YlW7h2xZDuxV2niO:dNG8xyQpnUacVVO","tlshash":"94925c24b1c774afc9876da0701b221894753f66e500f0c58bb5ceb6cae1e8f2217a6c","size":19329,"data":"","first_seen":"2026-09-02T02:00:14.526144Z","last_seen":"2026-09-02T02:19:17.707555Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-09-02T03:11:37.950447Z","times_seen":7248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/chunk-vendors.950244b8.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c871a437ebac0cfb63ab3378a4acda23","sha1":"1c117f7d026f8d330941282dfed8ef9bd0c77f37","sha256":"91b3bcdd37660a84b849418bb93be1ea0dffae935bf15acf0ce7de5c4b19f4a6","sha512":"478e9067566c7e64fa776f7074c3559dbd318ebab7bd0ad0daf78631b6ad80e9e18e6e051644555f3de4e629b00f41bfe8be9f38bf4d584fa4628b006821c5c4","ssdeep":"12288:Gy2TW9TOPc7U+WvKz+qQx1ejr3nEuDNKMky6:dZ9TOPyU+1z+jePn1pKQ6","tlshash":"2115078df286b0b51be760b5402f220bb2377969b40a84d4f675e4d4ad7894e2277f3c","size":904850,"data":"","first_seen":"2025-10-02T12:49:02.992778Z","last_seen":"2026-09-02T02:19:17.706335Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/index.36f49eef.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba202bd26cbe36f614636a4c66e9a247","sha1":"db813516e9d03423f8a9182485c2719f7ae5a196","sha256":"e981ebdc72d1874449ece901b8aa3e5c134ea52ede0569426678eff70181624d","sha512":"fe0d5e8c2cc72fe303aca3f243efa5e9e8d28140cae5b709737a4f22975694e50ac36339bb5c811cc494df814d90d2441ff354d47cbd439e600cd5c8f3334b7a","ssdeep":"3072:+DffH7+7383nzgOracutGuMpA4nlEbKYNXirRM:wfH7U383nzgAbYNSrRM","tlshash":"0c34f8c2b6c9106e8f831f85e06b3bfdf6bb1c728149e4c3d5d07fb91a99986520961c","size":243822,"data":"","first_seen":"2026-09-02T02:00:14.525211Z","last_seen":"2026-09-02T02:19:17.716541Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"App Launch","filename":"https://topcashback.cam/h5/static/js/index.36f49eef.js","line_number":1,"column_number":35332},{"level":"log","text":"App Show","filename":"https://topcashback.cam/h5/static/js/index.36f49eef.js","line_number":1,"column_number":35377},{"level":"log","text":"滚动到顶部","filename":"https://topcashback.cam/h5/static/js/pages-home-index.25727b02.js","line_number":1,"column_number":15825},{"level":"log","text":"滚动到顶部","filename":"https://topcashback.cam/h5/static/js/pages-home-index.25727b02.js","line_number":1,"column_number":15825}]},"http":[{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/lb2.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.237Z","timestamp":1788315522237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/lb2.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243ba-2c6ff\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NxvCM1v3d1pCm2CxlyCIzvvK%2BOV82Cygdr9RLv2LoinssgKstvG7Qy9FJJwVJNJdyuCQFmR0rGLLriQLLrIhcHKwCWejg%2FcyEeyn4h%2FeEQmm7JEjL9YZq4VZ%2FJQdglSPfU%3D\"}]}\r\ncf-ray: a349068dfb2c0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182015,"size_decoded":182607,"mime_type":"image/png","magic":"PNG image data, 750 x 320, 8-bit/color RGBA, non-interlaced","md5":"9a87ead7509c7076e1a4af19a54295f5","sha1":"0544d1b90f5870cb19b95703a00b866363ea0c5d","sha256":"ee8a224a204750b8947a18a610fdb7ab109ad5b3f8275c84f38adececc2356da","sha512":"2327dcefc4d9e6174f302ecc0cc1ce9b3d9f7fac6dbb0d8c8102b6715a074914c40a1b8e9272a92c91e14e5a5fd582a3d66b8ad721f318d712d50cd355aa3b78","ssdeep":"3072:Cx2tmgI0wJtqrFCDafQ61GdP9QatFTQH2a/AeTofzYDwTVuq7B2GYiJ0nb539XxW:Cx2a0prFiafQd9QSTO2a/Aek8+E6ZL6k","tlshash":"ea0423785ed42caa4aee400e5f19724cb4db5bf6ae3b3ff41f858b9804cd652e650d10","first_seen":"2026-09-02T02:00:14.517783Z","last_seen":"2026-09-02T02:19:17.70326Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.topcashback.cc/uploads/20260425/7f024c5838def4547f71b115656e6ec5.jpeg","fqdn":"admin.topcashback.cc","domain":"topcashback.cc","tld":"cc"},"ip":{"addr":"103.75.118.227","port":443,"asn":136258,"as":"BrainStorm Network, Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:43.493Z","timestamp":1788315523493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.topcashback.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:46:34 GMT","end":"Sun, 11 Oct 2026 12:46:33 GMT"},"fingerprint":{"sha1":"89:9D:63:0A:E6:6A:51:61:1E:20:3B:C0:C7:B2:CF:E9:17:99:0F:44","sha256":"7F:6C:41:D8:5F:C4:68:11:62:EB:5D:F2:7D:12:A8:99:58:D3:F1:F8:86:02:E9:07:C4:6E:79:1D:69:B2:02:DF"}}},"request":{"raw":"GET /uploads/20260425/7f024c5838def4547f71b115656e6ec5.jpeg HTTP/1.1\r\nHost: admin.topcashback.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:18:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 25 Apr 2026 13:54:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ecc7a6-db47\"\r\nexpires: Fri, 02 Oct 2026 02:18:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56135,"size_decoded":53443,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 468x594, components 3","md5":"e23413cb36942bc7b70e27c88d0d556f","sha1":"8dc1a463ed0adeb880c474022c64dfd5311d0462","sha256":"e421c2032d4bacc807c2622750143a7ecd64300ad8a338b5a938fd84d1c89ea2","sha512":"e6dd23adcd683e8d7ab54e19c37ad91945544fc73a5d68c9a05176027cdf2d811225e9d26920aa9f97b34da189094cea9f00a75cb0a62fa2c531071f220fddbe","ssdeep":"1536:kv+c7z3qMGhyBIxrCwcEiRpOGpiJduzQPSArTytYCH:c+c7mDZqpxifuMSKqY8","tlshash":"8f4301b00b1e270dfe4c00714192c1678b3ee771ea7b8a9b3c456f23c6b62655e20b9d","first_seen":"2026-09-02T02:00:14.515265Z","last_seen":"2026-09-02T02:19:17.703936Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"admin.topcashback.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/lb3.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.238Z","timestamp":1788315522238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/lb3.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243b9-5cbd4\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeqQo0LBmyx8M8HUIG2CsXDBD2t2%2F6maxBkLFBS9hRaT8xd0cwjC583ayH6X0GIHPJsUdtQf4o2UOX6P%2FNAaUcquqcEqyTgN72iqK7c3hWMlVv31FGTPiHUKBElxQcedDlw%3D\"}]}\r\ncf-ray: a349068dfb2d0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379860,"size_decoded":380787,"mime_type":"image/png","magic":"PNG image data, 750 x 320, 8-bit/color RGBA, non-interlaced","md5":"5caa66baac2cd427fdef4ba41fc1435c","sha1":"12a40981b5dcdda90fe4eafe4ae64b7b75ed1bd4","sha256":"ad3760ac096be5d6025cf5ba85c0dd1c9a1d7572f393970f5497ac63a4d207fe","sha512":"7f7fcf31007acff3d21710fca8e084170c8ed918235a9daaba57ab233d1d3eb4ee7ea29a19a998bb4044a0b7536d29fc04a4d19b64a46cfd11da5407cf7b39ac","ssdeep":"6144:3SrVFWfL8nmgVeWYhSGVc4amECli+MlZF4R5KYxJlgg0E00qmjETsH7AiLzxNdbv:36l9eO4amEClRMlZFnYxJlgg0E0v4EIv","tlshash":"048423929b53c3fa948b313ac018abb597b790bc933589c8c5a50ca443edd6d0db5f1d","first_seen":"2026-09-02T02:00:14.531946Z","last_seen":"2026-09-02T02:19:17.704654Z","times_seen":7,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/hz1.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.239Z","timestamp":1788315522239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/hz1.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243b7-41693\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=On5CsxIAqyPY4flcEGzWYWZ5yQbga3VTjjbQ%2BUZhhx3IPK6xkR2iX7P1daCrlzSRuhweUAm5ZBcXlwYH117I9lh0mIrACe%2FxC2GFRzrw7ZTV50VQHD7BnHbC2CX4xNrakMI%3D\"}]}\r\ncf-ray: a349068dfb2e0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267923,"size_decoded":268761,"mime_type":"image/png","magic":"PNG image data, 660 x 408, 8-bit/color RGBA, non-interlaced","md5":"05903b4d57e35eecc34a695231ef31b8","sha1":"a6d24911b7dca71c1885851f95b6cf2e39e0bf4c","sha256":"d440d54bc6ba22819e3201621b92b82530c48642ae31f76a252b00e2f696a8f9","sha512":"5ae1154914f6dbcd51148adc12cb528d65bca7438d49c28cd5f33849659b0964496f18ff2f03638baa2e4eb954495a3def98d0400fbdcbaf68f40c09215abb65","ssdeep":"6144:kcmjzFvYl0XAF+rIgQtTuVQfWzAS8OloulcX04PTTO:bmlCVF+cgqTuVQfWP8Lgck4P2","tlshash":"be44229ec94d6ffd1652cce1770a1b63a1c07ac3099d782c12ba13c26ad6b4536b3793","first_seen":"2026-09-02T02:00:14.527519Z","last_seen":"2026-09-02T02:19:17.705245Z","times_seen":7,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:44.800Z","timestamp":1788315524800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:18:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 02 Sep 2026 15:18:45 GMT\r\ncache-control: max-age=46800\r\nset-cookie: __uni__uid=rBACaWqXh4WWLHy7A8QrAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACaWqXh4WWLHy7A8QrAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACaWqXh4WWLHy7A8QrAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-09-02T03:11:37.933881Z","times_seen":20421,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":0,"dns":2,"connect":166,"send":0,"wait":167,"receive":0,"ssl":379},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/chunk-vendors.950244b8.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:41.756Z","timestamp":1788315521756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/js/chunk-vendors.950244b8.js HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 May 2026 21:01:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a024399-dce92\"\r\nexpires: Wed, 02 Sep 2026 13:59:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1150\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WB5o4o4sxBxCmLzioHi%2F2tFBTdgL46Tx4U%2B%2BHXY3NhD0KHwhnUzRlhR4w0qHB%2FejfCIQc%2Bo1YIH0bjY%2B362QBtCd4g9u3Hy5LPENm1Fwnar1pO7%2FcNmqnDJ4kZDPIEMJxSY%3D\"}]}\r\ncf-ray: a349068afb0e0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":904850,"size_decoded":297317,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64698), with no line terminators","md5":"c871a437ebac0cfb63ab3378a4acda23","sha1":"1c117f7d026f8d330941282dfed8ef9bd0c77f37","sha256":"91b3bcdd37660a84b849418bb93be1ea0dffae935bf15acf0ce7de5c4b19f4a6","sha512":"478e9067566c7e64fa776f7074c3559dbd318ebab7bd0ad0daf78631b6ad80e9e18e6e051644555f3de4e629b00f41bfe8be9f38bf4d584fa4628b006821c5c4","ssdeep":"12288:Gy2TW9TOPc7U+WvKz+qQx1ejr3nEuDNKMky6:dZ9TOPyU+1z+jePn1pKQ6","tlshash":"2115078df286b0b51be760b5402f220bb2377969b40a84d4f675e4d4ad7894e2277f3c","first_seen":"2025-10-02T12:49:02.992778Z","last_seen":"2026-09-02T02:19:17.706335Z","times_seen":21,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/hz3.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.241Z","timestamp":1788315522241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/hz3.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243b5-2fe27\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qiRHZEEm%2B1U43vFqJt5iHlpzPdzpSfeTvW6v%2B5f1XHFiL9brFINkpHvCRNGOCD5fBlGvPAqPSekZ5LDi39n%2FycBxE%2FXci5POjzpAWilp5zJPuGw7FpDyooPRDgrDq4jAH4%3D\"}]}\r\ncf-ray: a349068dfb2f0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196135,"size_decoded":196635,"mime_type":"image/png","magic":"PNG image data, 660 x 408, 8-bit/color RGBA, non-interlaced","md5":"da85b0b3db48d8824a20d96ee894b884","sha1":"18736d53659135b933b35bdfd6fa49e95c1298fb","sha256":"6af05a175c4e10130aaa8cee19b7da25e0646253a8dc1fb3eb4abae0a4886b6b","sha512":"856f65a2c54b6d4ec8999ee3059f375a9dd3663db013f146224e01c45d2cdb3e00c91a3b9068104e28e12ea28e63e8c409de2eac164b3b6b0350f96d3b83d85b","ssdeep":"3072:CSzO71ZYZl4DDmsDswqUdFwcA/JtToR5mQyhlRM/o6g2PYboii8pvcvVKZsEpm/i:fq7/eumsDsKd7KJiR4QyBM/tg2PY1DG6","tlshash":"e81412e86714fc0f73b2895a286799ca9077c4d649866915a03f73a1c3f443b5ceda33","first_seen":"2026-09-02T02:00:14.522875Z","last_seen":"2026-09-02T02:19:17.707018Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/pages-home-index.25727b02.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.008Z","timestamp":1788315522008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/js/pages-home-index.25727b02.js HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 May 2026 21:00:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a02438a-4b81\"\r\nexpires: Wed, 02 Sep 2026 13:59:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8LdP3g9aUEMrbe7yCfgXOhsvv3Wl5eV%2B2ihnS2VbxzeMuEm6UKgBmGFI5rzMIv1dLEs7NVgWjwbgYChUWn6fpL9uaJo07%2Fr%2BF%2FNJJXPBdBvpuVXyJev1GrqmZGVqqgMa30%3D\"}]}\r\ncf-ray: a349068c8b210b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19329,"size_decoded":10085,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18815), with no line terminators","md5":"7a2a31409ab291df3a3cf0fa50a1e517","sha1":"3f8a5ac8bda4b5c0cdb02981709f16a2fd291122","sha256":"7c70a7594f9345b1282b28980253b5827760159539d316fe4e3f6b8bdd1da26a","sha512":"7e53874135e1fbc947d9efcade6fe72080931c7031626fee8122eea813a3d10e2926e9bc61ab64df01806dc65a80145817e311a50878a783f0fd619b76e1688d","ssdeep":"384:86lNG8Uk+OFW7hmxrD6YlW7h2xZDuxV2niO:dNG8xyQpnUacVVO","tlshash":"94925c24b1c774afc9876da0701b221894753f66e500f0c58bb5ceb6cae1e8f2217a6c","first_seen":"2026-09-02T02:00:14.526144Z","last_seen":"2026-09-02T02:19:17.707555Z","times_seen":7,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/hz4.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.242Z","timestamp":1788315522242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/hz4.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243ae-660b0\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCHeL6wID9P%2FiKT93D2B6gFPfHVkvCpdZu9n%2B6Be6XeZpw2ItPoVK%2BRosDSBG%2FO%2Bl3Lh3usB3ms0Kj6YTh566vNlmKeZDgsJDln4F7hu7F2kXhgzsgWluc3r55r8ocpfGhk%3D\"}]}\r\ncf-ray: a349068e0b310b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417968,"size_decoded":418911,"mime_type":"image/png","magic":"PNG image data, 660 x 408, 8-bit/color RGBA, non-interlaced","md5":"a80b08f2e29c2b74802cbc320b7973e7","sha1":"a067b35956c69c02e48a19e4a1ffb9328bd6d234","sha256":"9ce8c6429072727aba8aee6bde9f0aae0337dfbd8d8ca230dd375b2da92d0c92","sha512":"e1ad917b344023f684eaab9d0f19660b29cdf4007048bdbd3fee97a2aab470d18047d16f27a2a00868bc4f441f34678f2eb077b7f47317d31563d77f63bc22d3","ssdeep":"6144:3EIuerbqLW0FnNS/A+ZdE50ykcOTyC6PwR5/motzgEN6QlA84Od+o/39E53fqQpn:3JusenMcBPE5/mE4Qldzh/39EsQdhs4","tlshash":"eb9423da06f7c437d63909b5d3173af8f1e9d5115a224bab843cc165c6a2a2b0bddf80","first_seen":"2026-09-02T02:00:14.528634Z","last_seen":"2026-09-02T02:19:17.708451Z","times_seen":7,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T02:18:40.974Z","timestamp":1788315520974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:41 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\nlast-modified: Mon, 11 May 2026 21:02:26 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSTXE9zkPoKb0WB%2BiK2olktPdAj9WenkqcT0XFBzOt1Eg8XRSRX83gZ5VgomUn4o1lnuyGc5chz80s1b4P%2FBthojY4x6rQBZOovhGcQQJBGJTVQgYylnsb3CzQE9v7Bukzw%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a34906868ad30b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":803,"size_decoded":1159,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (519), with CRLF line terminators","md5":"bb780094902255daa116f8916e772771","sha1":"bf71f07fb786ca4ae3c8f546335c2a9f64f31195","sha256":"6d826a4fae5f5c4056fc827dbd246122f2dcd5f112f855bf17b9fe39292b3d2f","sha512":"f18c6bd411d0e61283facdad2c4a25a64c6833697eb8fcfb74af532a73ba8630a47e79c1c09c5f504741bcbe9696de9680460e7ec4fd72720c58ca87a8cab663","ssdeep":"","tlshash":"8a01cec25c61e04d1720865174b6e11e4ada45b9e991cc2178dc26e94bb0b8ecd6f810","first_seen":"2026-09-02T02:00:14.511041Z","last_seen":"2026-09-02T02:19:17.709143Z","times_seen":7,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":52,"connect":18,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/index.2da1efab.css","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:41.754Z","timestamp":1788315521754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/index.2da1efab.css HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 May 2026 21:00:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a024366-178f9\"\r\nexpires: Wed, 02 Sep 2026 13:59:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1150\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HE4SpZrPm7FBG9Lxe02OI7b7f6XQVwIDeD1Xucm5PpU3j%2BxLOz1qqMvVT4hMEfWDe5Y8XaiOijMqsxXLh6c5gSaHsWIfWUf0RVD7euZGMTqtpo17IWZQnjtmQzWIeYq5rdM%3D\"}]}\r\ncf-ray: a349068afb0d0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96505,"size_decoded":27268,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-09-02T02:19:17.710515Z","times_seen":6477,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/favicon.ico","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.040Z","timestamp":1788315522040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lru7R6XNZ0yq74WbJpjVK6bkREIvgJKF4rARM0Xda28hMJmUThszDasgpClx8BaHBqOQS6HGmCcD91vwwATv4zTko33jUL65aPGeLlwTCdFPxX%2BXUNtGO2ZBmavy6Md5B0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a349068cbb220b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":700,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-02T08:42:39.590742Z","times_seen":320341,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/images/customer.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.235Z","timestamp":1788315522235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/images/customer.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:00:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a02437b-22c1\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=is4tUC9gVztyAiCVZxkMQgFr0rCIEHvPNOREuGBehu3y6BWfUXlISLWh%2BRT4ubSucfM2FEzyn0kDL7EyR18DTP4nGSwCW8%2BXjSpAzW%2FOilLwghU6GZeTzeJdQ8O0LLRDRuY%3D\"}]}\r\ncf-ray: a349068dfb2a0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8897,"size_decoded":9442,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"09fc3585c3404a3d53d4186fcaddada0","sha1":"a3c7339d0925b0bcccabb92517814ea6fb363363","sha256":"24175161f75433a7a737bfcb91f840265b6d362a349fcc7e0ffe676474cec059","sha512":"25b21faa9b5f3eb5d4fcd1c703778232cde7573364f3add02b4e79542f842eaca35445084d6a003a3e68c2efce5e0e52816db9efcee5a97a18ecb1ee6a919fb3","ssdeep":"192:H5P30DiESIrJva6WRjoz2RbjD5CYG05TXScGYbyHlLU+GUUIQu3ynrk:H1miEztar5D515TzOHxUId3sk","tlshash":"cc028e228ecf3d0b3c0ef54370fac2339eb751d19855e96559edc91a02321e12d8d1aa","first_seen":"2023-07-15T20:06:17Z","last_seen":"2026-09-02T02:19:17.711547Z","times_seen":77,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/lb1.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.236Z","timestamp":1788315522236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/lb1.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243b3-48728\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HgmUpYu9fciNDY28yHHboeFbH5MIVp530%2Brhwl7kT470CQDS9l9TPTvrg0iax9FfSuD9FKqDMK0DGlcjslD0XX1zfAXAsyj1Q194js5WpNyfiNeAwYS%2FEuEWyE5arWeF3g%3D\"}]}\r\ncf-ray: a349068dfb2b0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296744,"size_decoded":297292,"mime_type":"image/png","magic":"PNG image data, 750 x 320, 8-bit/color RGBA, non-interlaced","md5":"c0433a58d76f61cb108fde38a7b38f62","sha1":"2f7c842ea734d2d8b3e17067a42e80ec0be570d5","sha256":"5da79c0c00b362e665daf02fd30a2f4f5f35215700e7bd02171f1806ac5123fc","sha512":"f661d21308c1fe34a5eb202a58b3df42754d8e105e4502f2f5664d0ade88594c08df6c967fdc71f023ad6536d8143d3a6ff3ba6ea026a30df0c112eeee54d63d","ssdeep":"6144:Ivbygl2yzou0FwysLfRYEFyUpHi6yb8JbJBAn/9KMgd/cbh0qSG:ObyfukUsvovin/gMgqV0k","tlshash":"bf542369b27327b32f9f0318d8dc9109826d8795eae6b27088cfce6d015746dd9153ec","first_seen":"2026-09-02T02:00:14.533272Z","last_seen":"2026-09-02T02:19:17.712082Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/newimg/hz2.png","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.240Z","timestamp":1788315522240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/newimg/hz2.png HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 11 May 2026 21:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a0243b1-4c061\"\r\nexpires: Fri, 02 Oct 2026 01:59:33 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bt3f559Lc6AkkEXMAeiMzFO5HkIssp%2F4vh9J3VNUZxFXP%2FcCJpkOykrmJU4qdcRqrQZ1q7j8WAmUXNkSJMTq16hXJs2r17HN0qgf9MDLN6w5zaChsefi7WxtBoMVakJPSII%3D\"}]}\r\ncf-ray: a349068dfb300b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311393,"size_decoded":312297,"mime_type":"image/png","magic":"PNG image data, 660 x 408, 8-bit/color RGBA, non-interlaced","md5":"9b6921104bf7aa51215c6c4ad03e38ff","sha1":"3d666e5b8806e39127282f535e8b110be70cf22f","sha256":"6e7ef1e75af7d9e41e26d02843e43137add148d88acdf88b46a50d16f35df379","sha512":"9a33191a787f9558241dab4bb339b5ef3ac2b0c1f7bdf13519501b61258b702870cbacbc97c4963b24e117a0c0fb8b9f8cabf1d10fd6a524b8bb874b59ed9712","ssdeep":"6144:amqS5xp9FuGmM20lxIYxcMHmkpEN4K8UAfbjhv+sjgbo3dOel:jqEdT2ZS7RPPhGsjt3Dl","tlshash":"696423d1e8190375e3a0d9b05ed68cf5fc8d14b97a012bda187b73a8705fb98c942b87","first_seen":"2026-09-02T02:00:14.523987Z","last_seen":"2026-09-02T02:19:17.71256Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.topcashback.cc/uploads/20260425/beba7fa11f63422839fad3ad5984c525.jpeg","fqdn":"admin.topcashback.cc","domain":"topcashback.cc","tld":"cc"},"ip":{"addr":"103.75.118.227","port":443,"asn":136258,"as":"BrainStorm Network, Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:43.489Z","timestamp":1788315523489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.topcashback.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:46:34 GMT","end":"Sun, 11 Oct 2026 12:46:33 GMT"},"fingerprint":{"sha1":"89:9D:63:0A:E6:6A:51:61:1E:20:3B:C0:C7:B2:CF:E9:17:99:0F:44","sha256":"7F:6C:41:D8:5F:C4:68:11:62:EB:5D:F2:7D:12:A8:99:58:D3:F1:F8:86:02:E9:07:C4:6E:79:1D:69:B2:02:DF"}}},"request":{"raw":"GET /uploads/20260425/beba7fa11f63422839fad3ad5984c525.jpeg HTTP/1.1\r\nHost: admin.topcashback.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:18:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 25 Apr 2026 13:55:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ecc7c2-dbcc\"\r\nexpires: Fri, 02 Oct 2026 02:18:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56268,"size_decoded":49206,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 1024x866, components 3","md5":"5ce047fd7236980a5c4e454d5a9071ae","sha1":"5d0ccaa4fad342a90a736776ffd1673af9a72b52","sha256":"ee2cbedda0ae6693f0cd1e0f8006ab157957aa9e5e002636030f1a65164dea65","sha512":"a5abcd2ffd3afeebc986a4e7f30d4f797df3298a3b3d3e8f511391d9cbc54b418dd228d303365f3d2466bd0b6be51135f828e9e55a49cbe7001d94500c5295ae","ssdeep":"768:wGAvj+/Uzdd3twz0X6GLPFwBQm0SsU1vOSaraseBYxKFI9fiv6PiQj21X8C8:wGAvi/UDtwAnLP+ADSaQ3kfivGhoX8V","tlshash":"f843e1bf7358444de768aaf75125c30383666d7cdea7ba3a8312cd661a40207cdbc917","first_seen":"2026-09-02T02:00:14.529722Z","last_seen":"2026-09-02T02:19:17.713066Z","times_seen":7,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"admin.topcashback.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.topcashback.cc/uploads/20260425/eece2825a0d4e4b2a5f67627b19fb9ad.jpeg","fqdn":"admin.topcashback.cc","domain":"topcashback.cc","tld":"cc"},"ip":{"addr":"103.75.118.227","port":443,"asn":136258,"as":"BrainStorm Network, Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:43.492Z","timestamp":1788315523492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.topcashback.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:46:34 GMT","end":"Sun, 11 Oct 2026 12:46:33 GMT"},"fingerprint":{"sha1":"89:9D:63:0A:E6:6A:51:61:1E:20:3B:C0:C7:B2:CF:E9:17:99:0F:44","sha256":"7F:6C:41:D8:5F:C4:68:11:62:EB:5D:F2:7D:12:A8:99:58:D3:F1:F8:86:02:E9:07:C4:6E:79:1D:69:B2:02:DF"}}},"request":{"raw":"GET /uploads/20260425/eece2825a0d4e4b2a5f67627b19fb9ad.jpeg HTTP/1.1\r\nHost: admin.topcashback.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:18:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 25 Apr 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ecc78f-e6ca\"\r\nexpires: Fri, 02 Oct 2026 02:18:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59082,"size_decoded":58818,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 491x330, components 3","md5":"98b02367602885e3687aa43734e6de1b","sha1":"78607f73c2cc86f13caa205c1382f8ae5e0c6349","sha256":"13a62a8d3f011d2b2fcdfc4c90eceea8b5746f90dbca558207b09df5fda8064e","sha512":"a1e824b7dbd610bb847b8324627f22199b0c339b06cf085f4a72eb4d1689f31ec3ed13bf03e746f59864d6903ff7bf21cf1a9d489e9c2a5a4580210fdb1f9a77","ssdeep":"768:QAMrGFWZeFeYBIAUnUPo4r74dUAwlxx2eMzWzSXmtx3AU1nlKguFKHOHw+16MQS/:QAMrGFWlUVsdUAOgzUXtxhFlQAcJJ","tlshash":"f243012ec7843a54d28158b123a3cf94c2b67ab66c94271a744b2e74d1f04dc1daabf5","first_seen":"2026-09-02T02:00:14.519261Z","last_seen":"2026-09-02T02:19:17.713603Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1074,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"admin.topcashback.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/pages-grab-index~pages-home-index.81d0834e.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.006Z","timestamp":1788315522006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/js/pages-grab-index~pages-home-index.81d0834e.js HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 May 2026 21:01:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a02439f-7980\"\r\nexpires: Wed, 02 Sep 2026 13:59:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtngeyplAqVXMSzMHmglEDQQUim6YYQ52k8cKA78cP27i%2BoGMFsG%2FAkdcRvr00zWWnG0uWsKx8o86eZi%2FtXVVhyU6iKo56%2BrecOmMWKEon4dbV2uszucxW5aDG0pEVHohG4%3D\"}]}\r\ncf-ray: a349068c8b200b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31104,"size_decoded":8131,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28576), with no line terminators","md5":"52736a8bb57049fe0ba6a9cb78df3e49","sha1":"8ed4a9a386d4aaf955fd3a1ca37a06751985b761","sha256":"667ffe807980fe14b66d081010239ed41b43b631d89d68e5348724dd6d486df1","sha512":"3ea8ad3682e12bb79570da267fbc47a678dcb7b1e46460e74b5fd484aec006df2aaa8ac0555947a90fb380daaba1a72acc7f106f1f78781495f0b990675d0ec9","ssdeep":"768:bj4CDeRh4Odeihj2ptHU9A8SPNknxZxd8/10neY0i:bj4CiRh4Okihj2ptHU9A8SlknxZxdM12","tlshash":"32d20725b0c7e06b4ac3546411ab560aa0377e58d821f5d4e7b1b6f70deba8f132af1c","first_seen":"2026-09-02T02:00:14.514185Z","last_seen":"2026-09-02T02:19:17.714413Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.topcashback.cc/index/index?lang=en","fqdn":"admin.topcashback.cc","domain":"topcashback.cc","tld":"cc"},"ip":{"addr":"103.75.118.227","port":443,"asn":136258,"as":"BrainStorm Network, Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:42.230Z","timestamp":1788315522230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.topcashback.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:46:34 GMT","end":"Sun, 11 Oct 2026 12:46:33 GMT"},"fingerprint":{"sha1":"89:9D:63:0A:E6:6A:51:61:1E:20:3B:C0:C7:B2:CF:E9:17:99:0F:44","sha256":"7F:6C:41:D8:5F:C4:68:11:62:EB:5D:F2:7D:12:A8:99:58:D3:F1:F8:86:02:E9:07:C4:6E:79:1D:69:B2:02:DF"}}},"request":{"raw":"OPTIONS /index/index?lang=en HTTP/1.1\r\nHost: admin.topcashback.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://topcashback.cam/\r\nOrigin: https://topcashback.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:18:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Accept, Authorization, User_id\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":636,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T09:33:07.412461Z","times_seen":18233082,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":309,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"admin.topcashback.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topcashback.cam/h5/static/js/index.36f49eef.js","fqdn":"topcashback.cam","domain":"topcashback.cam","tld":"cam"},"ip":{"addr":"104.21.59.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:41.757Z","timestamp":1788315521757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topcashback.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 07:36:48 GMT","end":"Mon, 30 Nov 2026 08:34:22 GMT"},"fingerprint":{"sha1":"39:B5:C4:6D:7C:BE:D0:CD:AB:EE:D0:43:95:2C:4A:35:3D:17:98:A8","sha256":"E8:FC:87:EA:72:3A:1E:FA:90:3F:B6:2E:DA:09:FC:3F:02:E9:13:F9:BB:AA:0B:70:2E:25:CB:78:F7:49:6F:C5"}}},"request":{"raw":"GET /h5/static/js/index.36f49eef.js HTTP/1.1\r\nHost: topcashback.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:18:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 11 May 2026 21:01:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a02438d-3b86e\"\r\nexpires: Wed, 02 Sep 2026 13:59:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1150\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDlh5DqBXta79qeCC6FZ5fgbydx%2BQIUFfFu028zRe0HU63uT4VuSDdyXU%2F965P6DSE2J%2FObkcqMVSFJfEp4AyzJ8uXtD%2F8inDZcq6oMbAzl9YO9ElU3Rc7jx%2FHgN3asJr2s%3D\"}]}\r\ncf-ray: a349068afb0f0b59-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243822,"size_decoded":71423,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63676), with no line terminators","md5":"ba202bd26cbe36f614636a4c66e9a247","sha1":"db813516e9d03423f8a9182485c2719f7ae5a196","sha256":"e981ebdc72d1874449ece901b8aa3e5c134ea52ede0569426678eff70181624d","sha512":"fe0d5e8c2cc72fe303aca3f243efa5e9e8d28140cae5b709737a4f22975694e50ac36339bb5c811cc494df814d90d2441ff354d47cbd439e600cd5c8f3334b7a","ssdeep":"3072:+DffH7+7383nzgOracutGuMpA4nlEbKYNXirRM:wfH7U383nzgAbYNSrRM","tlshash":"0c34f8c2b6c9106e8f831f85e06b3bfdf6bb1c728149e4c3d5d07fb91a99986520961c","first_seen":"2026-09-02T02:00:14.525211Z","last_seen":"2026-09-02T02:19:17.716541Z","times_seen":7,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.topcashback.cc/uploads/20260425/06aa7cab24da5ff78f59cfb2bfa19655.jpeg","fqdn":"admin.topcashback.cc","domain":"topcashback.cc","tld":"cc"},"ip":{"addr":"103.75.118.227","port":443,"asn":136258,"as":"BrainStorm Network, Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topcashback.cam/","date":"2026-09-02T02:18:43.491Z","timestamp":1788315523491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.topcashback.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 12:46:34 GMT","end":"Sun, 11 Oct 2026 12:46:33 GMT"},"fingerprint":{"sha1":"89:9D:63:0A:E6:6A:51:61:1E:20:3B:C0:C7:B2:CF:E9:17:99:0F:44","sha256":"7F:6C:41:D8:5F:C4:68:11:62:EB:5D:F2:7D:12:A8:99:58:D3:F1:F8:86:02:E9:07:C4:6E:79:1D:69:B2:02:DF"}}},"request":{"raw":"GET /uploads/20260425/06aa7cab24da5ff78f59cfb2bfa19655.jpeg HTTP/1.1\r\nHost: admin.topcashback.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://topcashback.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:18:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 25 Apr 2026 13:53:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ecc774-183f2\"\r\nexpires: Fri, 02 Oct 2026 02:18:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99314,"size_decoded":97524,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 930x780, components 3","md5":"fad23186b229e01c2c7b6ceac83ae52c","sha1":"664c063f02a247e8118db7168817af68e11b87b4","sha256":"5390b765bebff4894ebc1bcec41b3c3c566e2b9f1d1de4def485a081d889077c","sha512":"6e988c2e12b4d7585ff13692b8ccd708abcdf59b522f15a1c54e9decff0b15bbf86a6468f00c09700cc2ca0beb58a0f0eb3b08f1d188ddd568eb041c13487ebe","ssdeep":"1536:j4uVUBLsbUpLueXl32m9TRYQSLf4tOetiTxuJ1htW86FZzh10T:0+UBNLue9qQSLf4tGwtWvhiT","tlshash":"dea312c74bb0842ad26a287ce5d33b739295bbf3e72711327a6136f6572416b2e71103","first_seen":"2026-09-02T02:00:14.53071Z","last_seen":"2026-09-02T02:19:17.717503Z","times_seen":7,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"admin.topcashback.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}