{"report_id":"f1297b9a-0c4f-4427-a694-590d767eb0ae","version":0,"status":"done","tags":[],"date":"2026-09-11T03:36:05Z","url":{"schema":"http","addr":"rev-cash.xyz/","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"rev-cash.xyz/","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"title":"RevCash — Turn your RevPoints into cash","dom":{"size":68399,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"570fe5361f5cf3d73efec49a1ca300e6","sha1":"009c609ab7fe763f036c9aae8354d0cd2cd2ee94","sha256":"3e226c6d9f4ecfb447df9b7c2c42393de9269680471c5b589e4e4db77b16e83f","sha512":"16243f291f11646a0b841d2c4acf23712ba5ab3fc6267a9b570a54114b733a645c08a3e71f6e5f77547af38f939522978ef3fd9c386ae048f9b77a048d0f1c5c","ssdeep":"1536:4a3BQzQtTecrvcr9crmcrFXkDzsK2MNDg5M:qst89UM","tlshash":"cd633c7513085ee7f72dc7b5a4f0ee8d60fa217fa7b14014da671aab09abc908e14dc4","dom_hash":"domhash041216ed096bd2e8bef7ea60e6b1ff1f","first_seen":"2026-09-11T03:36:12.233053Z","last_seen":"2026-09-11T03:36:12.233053Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rev-cash.xyz/","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:36:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rev-cash.xyz","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":29,"received_data":1289717,"sent_data":22867,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":7101,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":1,"received_data":30905,"sent_data":585,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rev-cash.xyz/~flock.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-09-11T18:48:16.907457Z","times_seen":16805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/rolldown-runtime-CbXtAM7H.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b78aebccd37b8227a6b0e6be422cdbb","sha1":"f9a5e0bdb2755b0729d80f005ca20107292c602f","sha256":"bbf7c5086ae414dc3f33777e3eebf16ea8631325b8bb4690d25091c03567f31a","sha512":"f3a1454253aa003132520a77fdde28bc8de4dcaac736d329a7f8ccb19005392a4b51fc5c934b6b3919669d49c55c8539c0206251cf8b023639e52c2c489558dd","ssdeep":"","tlshash":"c1f0aca71890e6e307d1628bda785486e228787e06387198b774cdf6d8820c704e8e77","size":589,"data":"","first_seen":"2026-07-31T01:08:01.969242Z","last_seen":"2026-09-11T05:59:04.922365Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/useStore-CrbS8o3r.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"766fa058658cfe0ea8534fcfa9f98e24","sha1":"49ab9225119a05c6243a8ce44522c6ac8e5b4825","sha256":"c19f3aa0f4dafb3cc076151fba04c03aaa8e4129a5bb7681a7adaec183e822e8","sha512":"c956e96c5235383b178540e0fdfa2dda39ba1e0c1b4f443e5d7c9052467877273043d77ef7dbb2886ad68b957106eefe916a3f04d55db7016c8f13a930ccd335","ssdeep":"384:nlLyTwq+lAGlrIX1Ewlmz2KdOd91nCgbAbEsifKDtTbO/eyboV2v5+L9HxIFdKsa:nlL0+BcDKOd9HfKDhO/jcIFd7oh","tlshash":"e6c2d4e532d2f0a653db31a200bf9069f37d0991284c1524e1b5d9da3cb0a59e2fbf5b","size":27026,"data":"","first_seen":"2026-09-11T03:36:12.250654Z","last_seen":"2026-09-11T03:36:12.250654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/utils-0j-bkYGk.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe774cbbc22222b497dd3f0ce6f4c3bd","sha1":"63354526a10ff275df83c114ab79321844473d0f","sha256":"f3f07863abf0177a2f617ba4bfd5929e2de742e954a30fe7873c26acd7cafd15","sha512":"f4337c097fa5925ebb83d504dd6b785445c762419b31c29a4353c7491d4655c7e3d5ee500afedc0a5fcf185aa1ee14f301fdd025f784af41bfe0b392210bab52","ssdeep":"384:SNO4zn2LnNGEuJIzpl0gLtnPjkNHDO2EOTaUF0RkjitiNbtWsFh8TJJN:KO4zn2LNTuJU2eVPjkNH1v0RwIg8d","tlshash":"62f229677102256a16ffe253d15cebcde6312712ca0ec704f2520f309b79ba59696f0e","size":35188,"data":"","first_seen":"2026-09-11T03:36:12.263604Z","last_seen":"2026-09-11T03:36:12.263604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/useNavigate-BgiXp5e7.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce383876cb44efbe10d2a70e31a853c7","sha1":"d0e29db6dec7601b032aeb39d9dcd38424a78f1a","sha256":"d20fc22288b243304d7933c9f90a4d6772124f6350a0ea3a0a4fe3c824c076f8","sha512":"260bf2cfde07494850ed5c2bdf157362e6e9c3b0b18f64e9044b53df1d8d6d6b4361afe9820c815a86ce3b8c5f156879ce22a79cb3afafab0db316a66a836905","ssdeep":"","tlshash":"20d0a7c7bac341b018ac45fac06ec5119310d5a47388934485554255923146a85bff27","size":227,"data":"","first_seen":"2026-09-11T03:36:12.255306Z","last_seen":"2026-09-11T03:36:12.255306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/BrandMark-HB1TTzYY.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fb20add805055b0d0f5b47a3abff40c","sha1":"e982f4e37d023be2db68c9ecb482fb6d52661c62","sha256":"c0bb12caac552674fb4ef95908b5d419fc552581823f7fdb044728e8a4e6a70e","sha512":"8c8cd3d74230b7f300dcd13229a95fe84a04ef323d4ff6006a3e75e2cfd770067f43dedf5e4a0de2055df8fae6bac5d61fb62f77e590e56f2e67715f3ec748cc","ssdeep":"","tlshash":"c5618847f3c0787d6a37489d425d510fe296d244fe671628f1f8511a23622b4ba737c4","size":3180,"data":"","first_seen":"2026-09-11T03:36:12.259586Z","last_seen":"2026-09-11T03:36:12.259586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/redirect-CaDPrkdo.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cab5ac8d5c0c1d987148de224943e9","sha1":"f5b0706f0ae11ff3c46582bc98101635395df4c5","sha256":"7778f804a86aaa086defcb98e20587075aac1b645f2239dac06528c72cc9b75e","sha512":"cc749be9bc50891a96bb416d50dd028129fc34adf1bbe605f1cae95c2806f079652f450050ddd137126f715490da5dee96d8dd2d3f88e23903fea4e89c9d464b","ssdeep":"","tlshash":"831125df76cab2a8238b045280e75999f2ee44e2144c5164a058bc72387a5edc34be1b","size":946,"data":"","first_seen":"2026-06-01T09:46:57.85858Z","last_seen":"2026-09-11T03:36:12.257256Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/routes-CG6SFeyD.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b75dd3ffa4e6cfcecfcb60e94f98c40f","sha1":"66527902b6ebc6eff71b51cff3288107929ca5a7","sha256":"caf51d5144ede16c89913a27695dee3c88df64af430512de87b580e37ae4cf9b","sha512":"7f7fb578a41b23e30d27b56e2fc76a368284577aa0f5f18ec57c7e486f38fc083f3673b02b30dffd71cf42f510823daca4f01143704f761a56d5bd6970e2a511","ssdeep":"192:TiR2ZJcueniLkTkbaJ/2L0PgdQVnZNyrxUC6ZMv7dUd5Q9EGnI4CkZR057Q85jKH:tLcMLGm0PgETCLDydNGIbCaMEjAz","tlshash":"9732735afa447af8b93648b8916fe10eb12f85e8da5b44b8fdb4341511135d0bb23fc8","size":11971,"data":"","first_seen":"2026-09-11T03:36:12.258161Z","last_seen":"2026-09-11T03:36:12.258161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/Footer-BnWQVyUi.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b398fcf083fd54f8edbcc545fc4544a6","sha1":"d5fc35db9484e79a7a7003c537f3254ef3a7191c","sha256":"403f6a857b8188011e6ed8d234c394e1c5c5620e768a1daee4cfaa2839352ba0","sha512":"b4e51f99745b913b94bf5dea6221048cc8a7858ff91e26194390c56e15300c27007db87a5492d9ba723644db9bbfdb3db0731d7a61c11eec26aa3373c885dc1d","ssdeep":"","tlshash":"b0211166f16068f97967869c71acc81ef36b90c8db460ab4b4b4b11512065ecf833fc5","size":1191,"data":"","first_seen":"2026-09-11T03:36:12.237826Z","last_seen":"2026-09-11T03:36:12.237826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/x-Cof8cGiq.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"1e3d9250c5b44538b278f70c37f7e06d","sha1":"4f4af77edf15efb7cb3dc4ab028fa1ea8829f179","sha256":"e75885292fdec0c862c76f9de0654eea48d0f7e2e1085eb757e336210c7129ca","sha512":"8c86901d9cb992625543bf8b6983d563b89e96d0000b4d645202e053fad61a182c2d6f046a6c5314562e1c808e6e46239c10914f25d595e79ab3263172819c70","ssdeep":"","tlshash":"c6c08cbf1da55ab000050280116aac0083c268ac03a30e16311002381f80080bc6df62","size":147,"data":"","first_seen":"2026-09-11T03:36:12.261511Z","last_seen":"2026-09-11T03:36:12.261511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/lottie-CZDiFWtC.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"032cebe5a78e87961e295709594ab6bb","sha1":"9027061ea8af4783fa8150d9c440b6aa4cdeb3a4","sha256":"5592f058d4598549e6be9383484ff67122278735595256f244737bedc3378867","sha512":"eb77cfd3bd9c1a2c220f613212f0c86da04aa1422403e63bf395c55040def7bea75dc9da276e1bc83d358be0e051952464538fcbdb85222ac647b0893ec95cf6","ssdeep":"1536:3q1jza2bkh/iD4cEGo6/tJmF7smSQGjh4Enfnbsr2fBmeGOMMpHNv8JQh8w/YIzI:3ECN5choqtJmF7smSNryl+bPUBIZ/h9Y","tlshash":"8b642a597190343942c54069906f1a0bf736686e2869c41c7728f4ffacbde8d32beb79","size":306592,"data":"","first_seen":"2026-09-11T03:36:12.239088Z","last_seen":"2026-09-11T03:36:12.239088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/preload-helper-Czpn1I53.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0daf8c146c057015a6f463d2110afa","sha1":"b04fb92ac6915d331fc0e7eb3804d06a3312195e","sha256":"aba87f2a53e45ecdc9113fc30387d16e449d1676428cf5f82dd624c1df97d152","sha512":"d29d876b4b19ef171d0c4a34a3a1f51c6b848c75d4ef5dcb90d85fbe068fcb43049431d65830208c9d7185ce5ee6d20063718031cf3497d8aa84a1b0e9e47c99","ssdeep":"","tlshash":"212162d737c0a032034d5957e0b6f3e3eba11ce1382914549208dd926f1aee498dcf55","size":1196,"data":"","first_seen":"2026-07-09T15:21:19.993345Z","last_seen":"2026-09-11T18:58:15.231725Z","times_seen":1070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/matchContext-BZDfJvgm.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2392614c639276a1917613390db528d","sha1":"5d844a5f573a6798d3c8e87fef4178a10f6d14e2","sha256":"89dcff5aac44096694959d1704381f606eba4b6d686760a18ed35cb45d750393","sha512":"2ab9c5dccd27d660a6c2582c673489056cf6167e9e6864b88d57d24c5e12149b737c848335df20f44eaf071f27481f5ac8946bf605739d07591e54612e4da8de","ssdeep":"","tlshash":"c8d02209e94001b07aba4cdbc036c0b2d370b0591398dac8800749aac2d6a8456bfd62","size":203,"data":"","first_seen":"2026-09-11T03:36:12.268394Z","last_seen":"2026-09-11T03:36:12.268394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/cashout.functions-Da6_R8Nt.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7f0968f6ea624a88c9c010f0ee21d4","sha1":"b3b1263f811391dba48e133f0acb8e763d8cb0af","sha256":"34b15654da12a031f306c4202a2d5f957694f7273702d141526c8085c68a0702","sha512":"1e24d05bf65e6e7f5683a26d64b431fc82a1cf39032478cc61249eb39ea2dc8d2573e223b5b8251d5fce80352effa6f1655650833d3df0c758ae15b1afe1a646","ssdeep":"","tlshash":"6d21be1f3a8e46f94b18c5c8ea52362d407b1e68cbba9e981c24096603f31e134cf243","size":1164,"data":"","first_seen":"2026-09-11T03:36:12.260555Z","last_seen":"2026-09-11T03:36:12.260555Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/cash-out-BtfBcQz9.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc4f72408998695c2a172ebb70c6fb4a","sha1":"583f15acd39a93c82e279cce57c849b80fc6fe58","sha256":"59e0658dc86e618f94c63295cf032bf0e31c1cb77278851cab2fa96c16ec8d10","sha512":"99fc72a0dcc7b25da1765740edc0b542b69bfa4a7b67eac165cb2dadaf1d030d96e306e50d59e42ee1a4e7d3844e5a20e30068cb526333e5039c86519006fbb9","ssdeep":"1536:ZTuKtSZhrGOUClRQpxlaLaWilZmv54X6RpmUDLdXqphikn0t4lk:ZTugGLaWilQv54X6Rp/LdXqzn+4lk","tlshash":"8353f8c63756b0100bad919614b91543e3aaba9c161d54adf4fa80ee7b9cc81e3b3f34","size":64626,"data":"","first_seen":"2026-09-11T03:36:12.264955Z","last_seen":"2026-09-11T03:36:12.264955Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/index-ClrxVo0k.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"207237953fc06ee6dcb92a13b940e543","sha1":"93b8902387d2ced6ba912652ed2c9a9d678243c3","sha256":"2e1557762df5d837570ce12b8bf36859dea11e1492de983b52c76aa26fdbc7b1","sha512":"2444c182fd8d41b7afc3655700840ae4a2b67243dc7c6d52a94b75e05e2290ea684d74853f32c32d68d284b29dcfaa854009c2be0334144686158d2942211239","ssdeep":"6144:YMGGTSermtvSOQiqWx04mp+LvWXnjfdxK726FuYHYtGyiZNIYF2ZWsqzP1w8fMKZ:YnfQiYwy6xYcygkfvykm","tlshash":"20b46ee833a6b5230bd641b2907b1502f33914566c0d0428b678eddf76f5849e6bbfb8","size":525003,"data":"","first_seen":"2026-09-11T03:36:12.267089Z","last_seen":"2026-09-11T03:36:12.267089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/Nav-CtHokHYa.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ba23cce095ceee130d36bc201c071fa","sha1":"daf97cce7e757c48d3838bcda169562de8cf52c7","sha256":"a537fdee4ed1744d4ba24752bbd3e1b26517af0d1890ca72773082f05ba0b177","sha512":"9ee3554966846fdb7c502f06db04d7e636931e78b5acee90ce8be9335946cf4b542e40150596ec43a7405c9a0b3d69654bc0d8ef93dc4d194906de1cb392b848","ssdeep":"","tlshash":"a241430af144a9ffe42a86a0615fe64cb72f8548fba64974f1b075190144680fe63fc6","size":2265,"data":"","first_seen":"2026-09-11T03:36:12.24046Z","last_seen":"2026-09-11T03:36:12.24046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/arrow-right-BxpQyb1E.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a869da2a8daf24ab4ec2ff83f34ef6cc","sha1":"9592204415f9c164d18a164abab5b4bf4a71124c","sha256":"0d6374355aeba033edc2ade6dc7baaf32aa413abe971376b6de3cdf04ed8862e","sha512":"1191f3d3d6ba0bd2276db5fdcac27fd5aa5e200b7e0f95911c6d4f9a58d167c1031ff40a83fc5dea5cee9450f366d5ff8361951e65fceba40f3d4151d34cc3ae","ssdeep":"","tlshash":"a7c08c1f6cc857b0444123d1089e3d058a8224fc53f385053118b3bc0a800d1a8bef62","size":158,"data":"","first_seen":"2026-09-11T03:36:12.256254Z","last_seen":"2026-09-11T03:36:12.256254Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/revcash-Cr4VJyQp.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1631dfce87c213aaf87d1bea323ff210","sha1":"b04e160b15785ae1681b752ea068de61ca988193","sha256":"cafa37245675e73aa9ab5e7718094646cba82e0150fc58c968a9065f1289a3d0","sha512":"f3970a6fd882ade4f153391a26eebd98e57e516819824f592a6cffb519cf57935c2f3b225b51e4211883ccac59b9ab23becf0d4224874e27cdc52fc722504aef","ssdeep":"","tlshash":"4c4162eb13881330270313b6e5454785abbb657c2b6953f0788785bc233d6ea526bdc8","size":2345,"data":"","first_seen":"2026-09-11T03:36:12.241441Z","last_seen":"2026-09-11T03:36:12.241441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/useQuery-CF3jO7OO.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2c7181432057593738e822ac4bd2eaf","sha1":"7641f609971735e47707b44a23c46e5f7e7d1338","sha256":"62b4f9998cedcc02fbd24eb5c822403a67821a755c86cf8cffabc73996039485","sha512":"d17724363aa7ec91b8c315a211a6ba40150334e1cc7583ddd0f5c8c2fd0b853c4707ec0890c527c8c98ce61a9df5d06f0db8f1321d4fcbf68f6accd72adf5007","ssdeep":"384:SaqpHbRcyT+H60MLlYnB6KusOWwNM/O1rnW+XQTf5:SafyTRlWiOwzW+XQ75","tlshash":"7952b8aa7651b31372eec1d18c2a0029e7257644181e801c76ac9ae755e3dc9f9fff31","size":13212,"data":"","first_seen":"2026-09-11T03:36:12.243628Z","last_seen":"2026-09-11T03:36:12.243628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rev-cash.xyz/assets/Footer-BnWQVyUi.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.606Z","timestamp":1789097734606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/Footer-BnWQVyUi.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948d77130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":1081,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"b398fcf083fd54f8edbcc545fc4544a6","sha1":"d5fc35db9484e79a7a7003c537f3254ef3a7191c","sha256":"403f6a857b8188011e6ed8d234c394e1c5c5620e768a1daee4cfaa2839352ba0","sha512":"b4e51f99745b913b94bf5dea6221048cc8a7858ff91e26194390c56e15300c27007db87a5492d9ba723644db9bbfdb3db0731d7a61c11eec26aa3373c885dc1d","ssdeep":"","tlshash":"b0211166f16068f97967869c71acc81ef36b90c8db460ab4b4b4b11512065ecf833fc5","first_seen":"2026-09-11T03:36:12.237826Z","last_seen":"2026-09-11T03:36:12.237826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/lottie-CZDiFWtC.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:35.053Z","timestamp":1789097735053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/lottie-CZDiFWtC.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702535.1tHM1IDpFAxBs0QWBOoqjBH-Aj_NficJisXvRxzmfPw\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8c1a117130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306592,"size_decoded":77099,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48470)","md5":"032cebe5a78e87961e295709594ab6bb","sha1":"9027061ea8af4783fa8150d9c440b6aa4cdeb3a4","sha256":"5592f058d4598549e6be9383484ff67122278735595256f244737bedc3378867","sha512":"eb77cfd3bd9c1a2c220f613212f0c86da04aa1422403e63bf395c55040def7bea75dc9da276e1bc83d358be0e051952464538fcbdb85222ac647b0893ec95cf6","ssdeep":"1536:3q1jza2bkh/iD4cEGo6/tJmF7smSQGjh4Enfnbsr2fBmeGOMMpHNv8JQh8w/YIzI:3ECN5choqtJmF7smSNryl+bPUBIZ/h9Y","tlshash":"8b642a597190343942c54069906f1a0bf736686e2869c41c7728f4ffacbde8d32beb79","first_seen":"2026-09-11T03:36:12.239088Z","last_seen":"2026-09-11T03:36:12.239088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/Nav-CtHokHYa.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.604Z","timestamp":1789097734604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/Nav-CtHokHYa.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948d17130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2265,"size_decoded":1490,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2265), with no line terminators","md5":"6ba23cce095ceee130d36bc201c071fa","sha1":"daf97cce7e757c48d3838bcda169562de8cf52c7","sha256":"a537fdee4ed1744d4ba24752bbd3e1b26517af0d1890ca72773082f05ba0b177","sha512":"9ee3554966846fdb7c502f06db04d7e636931e78b5acee90ce8be9335946cf4b542e40150596ec43a7405c9a0b3d69654bc0d8ef93dc4d194906de1cb392b848","ssdeep":"","tlshash":"a241430af144a9ffe42a86a0615fe64cb72f8548fba64974f1b075190144680fe63fc6","first_seen":"2026-09-11T03:36:12.24046Z","last_seen":"2026-09-11T03:36:12.24046Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/revcash-Cr4VJyQp.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.605Z","timestamp":1789097734605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/revcash-Cr4VJyQp.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948d27130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2345,"size_decoded":1624,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2343), with no line terminators","md5":"1631dfce87c213aaf87d1bea323ff210","sha1":"b04e160b15785ae1681b752ea068de61ca988193","sha256":"cafa37245675e73aa9ab5e7718094646cba82e0150fc58c968a9065f1289a3d0","sha512":"f3970a6fd882ade4f153391a26eebd98e57e516819824f592a6cffb519cf57935c2f3b225b51e4211883ccac59b9ab23becf0d4224874e27cdc52fc722504aef","ssdeep":"","tlshash":"4c4162eb13881330270313b6e5454785abbb657c2b6953f0788785bc233d6ea526bdc8","first_seen":"2026-09-11T03:36:12.241441Z","last_seen":"2026-09-11T03:36:12.241441Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/__l5e/assets-v1/f2279a33-ff16-4fc9-8bca-5dbbfbcecc9d/Revcash-logo-animation.json","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:35.054Z","timestamp":1789097735054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /__l5e/assets-v1/f2279a33-ff16-4fc9-8bca-5dbbfbcecc9d/Revcash-logo-animation.json HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:35 GMT\r\ncontent-type: application/json\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\netag: W/\"9a359a0736323f3b6a02ba547f6324a4\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8c1a137130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141143,"size_decoded":18377,"mime_type":"application/json","magic":"JSON text data","md5":"9a359a0736323f3b6a02ba547f6324a4","sha1":"6c0a24823791b9397a0addd8f80dc670ddc4a750","sha256":"56616e16247c79099fa3ec9a27e106b4a1f733ae9f8c1e98ed028011f1ee7807","sha512":"ec147551830a6ac2516b0a5a247b622c97ca5541e5624bfc52c6a390d4cb6b158e53ea1e5ea353f254aff01985f134f981c658ac6ab06da7a8b11f9045a7920e","ssdeep":"1536:IM0ACWIKJB0ACfAQ1Aha/r+GM0ACnI2B0ACfc6az2TiLLa0A1:IMTBGfsaDJMmBGc6axLLa0i","tlshash":"8fd30a55872140bd97505c81da8770729eeac2a30fe349eed7b9f9281fa11dbb341f22","first_seen":"2026-09-11T03:36:12.24245Z","last_seen":"2026-09-11T03:36:12.24245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/useQuery-CF3jO7OO.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.599Z","timestamp":1789097734599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/useQuery-CF3jO7OO.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938ca7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13212,"size_decoded":5399,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13212), with no line terminators","md5":"a2c7181432057593738e822ac4bd2eaf","sha1":"7641f609971735e47707b44a23c46e5f7e7d1338","sha256":"62b4f9998cedcc02fbd24eb5c822403a67821a755c86cf8cffabc73996039485","sha512":"d17724363aa7ec91b8c315a211a6ba40150334e1cc7583ddd0f5c8c2fd0b853c4707ec0890c527c8c98ce61a9df5d06f0db8f1321d4fcbf68f6accd72adf5007","ssdeep":"384:SaqpHbRcyT+H60MLlYnB6KusOWwNM/O1rnW+XQTf5:SafyTRlWiOwzW+XQ75","tlshash":"7952b8aa7651b31372eec1d18c2a0029e7257644181e801c76ac9ae755e3dc9f9fff31","first_seen":"2026-09-11T03:36:12.243628Z","last_seen":"2026-09-11T03:36:12.243628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/~flock.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.607Z","timestamp":1789097734607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948d97130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-09-11T18:48:16.907457Z","times_seen":16805,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/favicon.svg","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.929Z","timestamp":1789097734929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: image/svg+xml\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8b49a27130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":846,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffd0567184aea041acb8b8e0654bdb84","sha1":"d83439d0a4d3020e36ba8320899143bb6892e79c","sha256":"0a25534776cd0f9f2df1e91ccb56226a9fb3ccb8f5913238b5256177751ef5b3","sha512":"00bf1ee40347121e14025979d4ddec1110fdf36d1661d7ade49a51a08eb4a8e9104c4be9c663d00702cedad612d6f863885e092988f6809dc1fb1ab9c33c934e","ssdeep":"","tlshash":"64019e5cf5e69c9b0e3487e16d9674e4608fc37f02e851acd7918b3ce0214ec9998589","first_seen":"2026-09-11T03:36:12.24541Z","last_seen":"2026-09-11T03:36:12.24541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/~api/analytics","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:35.108Z","timestamp":1789097735108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nContent-Type: application/json\r\nContent-Length: 333\r\nOrigin: https://rev-cash.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs; session-id=dbaba739-0074-4eb2-a3b2-b57d01a3739c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":333,"data":"{\"timestamp\":\"2026-09-11T03:35:35.107Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"dbaba739-0074-4eb2-a3b2-b57d01a3739c\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://rev-cash.xyz/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 11 Sep 2026 03:35:35 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a3939f8c6a387130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-09-11T18:48:16.909124Z","times_seen":6564,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/styles-DWbcHFzz.css","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.585Z","timestamp":1789097734585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/styles-DWbcHFzz.css HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8928b27130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83928,"size_decoded":15021,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"992099f737bcd66a1309905c9b929696","sha1":"595077bccce4a3f2f1081b7a04cef9f13a61a9f9","sha256":"88b6b2cb04a56b8766ffd483afebf7c684b4a8ac185991fe38006533da6a1d91","sha512":"8343a4ef5845ad471a32d32d4f64474e0f342c62038fd24072a85e700583f71287644cb15601d38520aa7ce90ac74f7a12f184a3a817a217cfec8d0e8b3812c1","ssdeep":"1536:2jXzGh+nqJQH2kd8C+yfXVwQmCYhpsJsBNaNSsMq+WDhXX78uJX84988R988q:0XzGh+nqJQH2kdv+ydwBCYhps6BSMq+X","tlshash":"c683f794b229d93f7c33a4f5938cb88c9119b0c0de3556e8fe52622356c7bf29d6b214","first_seen":"2026-09-11T03:36:12.246931Z","last_seen":"2026-09-11T03:36:12.246931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Instrument+Sans:ital,wght@0,400..700;1,400..600\u0026family=Geist+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.587Z","timestamp":1789097734587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Instrument+Sans:ital,wght@0,400..700;1,400..600\u0026family=Geist+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 03:35:34 GMT\r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6417,"size_decoded":1505,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"af22ef76a4449f9e33b1208999cfb460","sha1":"8c0538a93d7a1bc0db930d917e9eef685e93f588","sha256":"bd74c4ae52a8b738a65ad4783eea8b0d172ef43c5f9e64f1308ff11c29a4f36d","sha512":"739ad6c3d80836d936a3aca32d728b9805f4abfe538537087bf66f53ef86b72dec149b399fd08126dc2cb5c112241cce17e77440db085e7375e90d0bb7f326a5","ssdeep":"96:DOEagzOEaIFZHOEa3ejcOEagAOEaFJc+uoOEaDN4OXagzOXaIFZHOXa3ejcOXagL:0gkj3AzktiygLc3AsLtRVoyzo3/cK","tlshash":"20d1cda1101ba400ab932cc177cf7e36ae4e61147401d67daffe189cacafc2557a2b5d","first_seen":"2026-09-11T03:36:12.248065Z","last_seen":"2026-09-11T03:36:12.248065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/useStore-CrbS8o3r.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.591Z","timestamp":1789097734591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/useStore-CrbS8o3r.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938be7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27026,"size_decoded":9995,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27026), with no line terminators","md5":"766fa058658cfe0ea8534fcfa9f98e24","sha1":"49ab9225119a05c6243a8ce44522c6ac8e5b4825","sha256":"c19f3aa0f4dafb3cc076151fba04c03aaa8e4129a5bb7681a7adaec183e822e8","sha512":"c956e96c5235383b178540e0fdfa2dda39ba1e0c1b4f443e5d7c9052467877273043d77ef7dbb2886ad68b957106eefe916a3f04d55db7016c8f13a930ccd335","ssdeep":"384:nlLyTwq+lAGlrIX1Ewlmz2KdOd91nCgbAbEsifKDtTbO/eyboV2v5+L9HxIFdKsa:nlL0+BcDKOd9HfKDhO/jcIFd7oh","tlshash":"e6c2d4e532d2f0a653db31a200bf9069f37d0991284c1524e1b5d9da3cb0a59e2fbf5b","first_seen":"2026-09-11T03:36:12.250654Z","last_seen":"2026-09-11T03:36:12.250654Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.764Z","timestamp":1789097734764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rev-cash.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:32:20 GMT\r\nexpires: Thu, 09 Sep 2027 10:32:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 147794\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":30905,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-09-11T15:56:43.401594Z","times_seen":3531,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/rolldown-runtime-CbXtAM7H.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.590Z","timestamp":1789097734590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/rolldown-runtime-CbXtAM7H.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8928ba7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":874,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (589), with no line terminators","md5":"2b78aebccd37b8227a6b0e6be422cdbb","sha1":"f9a5e0bdb2755b0729d80f005ca20107292c602f","sha256":"bbf7c5086ae414dc3f33777e3eebf16ea8631325b8bb4690d25091c03567f31a","sha512":"f3a1454253aa003132520a77fdde28bc8de4dcaac736d329a7f8ccb19005392a4b51fc5c934b6b3919669d49c55c8539c0206251cf8b023639e52c2c489558dd","ssdeep":"","tlshash":"c1f0aca71890e6e307d1628bda785486e228787e06387198b774cdf6d8820c704e8e77","first_seen":"2026-07-31T01:08:01.969242Z","last_seen":"2026-09-11T05:59:04.922365Z","times_seen":116,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/preload-helper-Czpn1I53.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.597Z","timestamp":1789097734597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/preload-helper-Czpn1I53.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938c87130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1196,"size_decoded":1182,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1196), with no line terminators","md5":"7d0daf8c146c057015a6f463d2110afa","sha1":"b04fb92ac6915d331fc0e7eb3804d06a3312195e","sha256":"aba87f2a53e45ecdc9113fc30387d16e449d1676428cf5f82dd624c1df97d152","sha512":"d29d876b4b19ef171d0c4a34a3a1f51c6b848c75d4ef5dcb90d85fbe068fcb43049431d65830208c9d7185ce5ee6d20063718031cf3497d8aa84a1b0e9e47c99","ssdeep":"","tlshash":"212162d737c0a032034d5957e0b6f3e3eba11ce1382914549208dd926f1aee498dcf55","first_seen":"2026-07-09T15:21:19.993345Z","last_seen":"2026-09-11T18:58:15.231725Z","times_seen":1070,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/__l5e/assets-v1/cc8f9a6e-a395-4495-8d32-bbca00ebe1bd/Revcash-R-white.svg","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.611Z","timestamp":1789097734611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /__l5e/assets-v1/cc8f9a6e-a395-4495-8d32-bbca00ebe1bd/Revcash-R-white.svg HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: attachment; filename=\"Revcash-R-white.svg\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\netag: W/\"ffd0567184aea041acb8b8e0654bdb84\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8958e27130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":1024,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffd0567184aea041acb8b8e0654bdb84","sha1":"d83439d0a4d3020e36ba8320899143bb6892e79c","sha256":"0a25534776cd0f9f2df1e91ccb56226a9fb3ccb8f5913238b5256177751ef5b3","sha512":"00bf1ee40347121e14025979d4ddec1110fdf36d1661d7ade49a51a08eb4a8e9104c4be9c663d00702cedad612d6f863885e092988f6809dc1fb1ab9c33c934e","ssdeep":"","tlshash":"64019e5cf5e69c9b0e3487e16d9674e4608fc37f02e851acd7918b3ce0214ec9998589","first_seen":"2026-09-11T03:36:12.24541Z","last_seen":"2026-09-11T03:36:12.24541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/_serverFn/fc5c7330b0c9569a79e51ae03302f7e593cf417c14690513a5d05e99010ef7c0","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:35.443Z","timestamp":1789097735443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"POST /_serverFn/fc5c7330b0c9569a79e51ae03302f7e593cf417c14690513a5d05e99010ef7c0 HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/x-tss-framed, application/x-ndjson, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\ncontent-type: application/json\r\nx-tsr-serverfn: true\r\nContent-Length: 157\r\nOrigin: https://rev-cash.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs; session-id=dbaba739-0074-4eb2-a3b2-b57d01a3739c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":157,"data":"{\"t\":{\"t\":10,\"i\":0,\"p\":{\"k\":[\"data\"],\"v\":[{\"t\":10,\"i\":1,\"p\":{\"k\":[\"points\",\"region\"],\"v\":[{\"t\":0,\"s\":25000},{\"t\":1,\"s\":\"EU\"}]},\"o\":0}]},\"o\":0},\"f\":63,\"m\":[]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:35 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702535.1tHM1IDpFAxBs0QWBOoqjBH-Aj_NficJisXvRxzmfPw\r\nx-tss-serialized: true\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8e8b2a7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":858,"size_decoded":837,"mime_type":"application/json","magic":"JSON text data","md5":"b3adea1c1d52d92814df9e5eca7d818c","sha1":"fb55aa089d7b7af5a66c4f06724172717922a617","sha256":"91bb2edfb34d59d79ab8e1fe2bd042dc0498dd19c88224ee9b0d7a74a3d66bbd","sha512":"783ca9823d82abad9ce5cad543892100108d4c26ae773c289e7edd5887986bc04b0f6eea651db0de9c77ad839de0af2dc1d8171800f4af21b4b9f4b3fd974192","ssdeep":"","tlshash":"4411e1bd4c2e747eb742ac519ab7b543c9d116c92fd58bc0c2adc61c02e26891322f25","first_seen":"2026-09-11T03:36:12.253349Z","last_seen":"2026-09-11T03:36:12.253349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:35:33.237Z","timestamp":1789097733237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs; HttpOnly; SameSite=None; Secure; Path=/; Domain=rev-cash.xyz; Expires=Fri, 11 Sep 2026 04:05:34 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f81adca7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs","quoted":false,"path":"/","domain":"rev-cash.xyz","expires":"2026-09-11T04:05:34Z","raw_expires":"Fri, 11 Sep 2026 04:05:34 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs; HttpOnly; SameSite=None; Secure; Path=/; Domain=rev-cash.xyz; Expires=Fri, 11 Sep 2026 04:05:34 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23323,"size_decoded":6444,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"0e78ced1cf64fb5e2c915db8b46ea84a","sha1":"9b61280ca5f5ffbd9fbb6e1efd6dc40b824db5ba","sha256":"f734d326c99f59795d245b4f546e42185e3cc13a8b6424eb03de2ad6b86dc9ea","sha512":"4fd0f05d867a1a6bd4b33b605da947422854c7dd9c2f9c77cec276963f90f28576c7b77497ddcbe360c177c7b69a7b1b1fea20a18d17ae488eee91188d8c4a2f","ssdeep":"384:oBGejjeOJZeK9sEQzTJOCpsiXYkDzSZPXMF2BKHiYvAIwU4CIxe/ln+vudiI3lma:oBGCjtJZ/9sEQzsGsXkDzgPK22i8Jw5G","tlshash":"b9a2ea321204293f233782e9b261f755e0fa934de277957cf5b842aa57c2dd0dd23a98","first_seen":"2026-09-11T03:36:12.254245Z","last_seen":"2026-09-11T03:36:12.254245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":127,"connect":1,"send":0,"wait":828,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/useNavigate-BgiXp5e7.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.601Z","timestamp":1789097734601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/useNavigate-BgiXp5e7.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938cc7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":700,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce383876cb44efbe10d2a70e31a853c7","sha1":"d0e29db6dec7601b032aeb39d9dcd38424a78f1a","sha256":"d20fc22288b243304d7933c9f90a4d6772124f6350a0ea3a0a4fe3c824c076f8","sha512":"260bf2cfde07494850ed5c2bdf157362e6e9c3b0b18f64e9044b53df1d8d6d6b4361afe9820c815a86ce3b8c5f156879ce22a79cb3afafab0db316a66a836905","ssdeep":"","tlshash":"20d0a7c7bac341b018ac45fac06ec5119310d5a47388934485554255923146a85bff27","first_seen":"2026-09-11T03:36:12.255306Z","last_seen":"2026-09-11T03:36:12.255306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/arrow-right-BxpQyb1E.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.603Z","timestamp":1789097734603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/arrow-right-BxpQyb1E.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948d07130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":664,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a869da2a8daf24ab4ec2ff83f34ef6cc","sha1":"9592204415f9c164d18a164abab5b4bf4a71124c","sha256":"0d6374355aeba033edc2ade6dc7baaf32aa413abe971376b6de3cdf04ed8862e","sha512":"1191f3d3d6ba0bd2276db5fdcac27fd5aa5e200b7e0f95911c6d4f9a58d167c1031ff40a83fc5dea5cee9450f366d5ff8361951e65fceba40f3d4151d34cc3ae","ssdeep":"","tlshash":"a7c08c1f6cc857b0444123d1089e3d058a8224fc53f385053118b3bc0a800d1a8bef62","first_seen":"2026-09-11T03:36:12.256254Z","last_seen":"2026-09-11T03:36:12.256254Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/redirect-CaDPrkdo.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.593Z","timestamp":1789097734593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/redirect-CaDPrkdo.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938c37130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946,"size_decoded":1029,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (946), with no line terminators","md5":"f0cab5ac8d5c0c1d987148de224943e9","sha1":"f5b0706f0ae11ff3c46582bc98101635395df4c5","sha256":"7778f804a86aaa086defcb98e20587075aac1b645f2239dac06528c72cc9b75e","sha512":"cc749be9bc50891a96bb416d50dd028129fc34adf1bbe605f1cae95c2806f079652f450050ddd137126f715490da5dee96d8dd2d3f88e23903fea4e89c9d464b","ssdeep":"","tlshash":"831125df76cab2a8238b045280e75999f2ee44e2144c5164a058bc72387a5edc34be1b","first_seen":"2026-06-01T09:46:57.85858Z","last_seen":"2026-09-11T03:36:12.257256Z","times_seen":58,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/routes-CG6SFeyD.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.598Z","timestamp":1789097734598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/routes-CG6SFeyD.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938c97130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11971,"size_decoded":4892,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (11819)","md5":"b75dd3ffa4e6cfcecfcb60e94f98c40f","sha1":"66527902b6ebc6eff71b51cff3288107929ca5a7","sha256":"caf51d5144ede16c89913a27695dee3c88df64af430512de87b580e37ae4cf9b","sha512":"7f7fb578a41b23e30d27b56e2fc76a368284577aa0f5f18ec57c7e486f38fc083f3673b02b30dffd71cf42f510823daca4f01143704f761a56d5bd6970e2a511","ssdeep":"192:TiR2ZJcueniLkTkbaJ/2L0PgdQVnZNyrxUC6ZMv7dUd5Q9EGnI4CkZR057Q85jKH:tLcMLGm0PgETCLDydNGIbCaMEjAz","tlshash":"9732735afa447af8b93648b8916fe10eb12f85e8da5b44b8fdb4341511135d0bb23fc8","first_seen":"2026-09-11T03:36:12.258161Z","last_seen":"2026-09-11T03:36:12.258161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/BrandMark-HB1TTzYY.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.601Z","timestamp":1789097734601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/BrandMark-HB1TTzYY.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948ce7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3180,"size_decoded":2100,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3180), with no line terminators","md5":"9fb20add805055b0d0f5b47a3abff40c","sha1":"e982f4e37d023be2db68c9ecb482fb6d52661c62","sha256":"c0bb12caac552674fb4ef95908b5d419fc552581823f7fdb044728e8a4e6a70e","sha512":"8c8cd3d74230b7f300dcd13229a95fe84a04ef323d4ff6006a3e75e2cfd770067f43dedf5e4a0de2055df8fae6bac5d61fb62f77e590e56f2e67715f3ec748cc","ssdeep":"","tlshash":"c5618847f3c0787d6a37489d425d510fe296d244fe671628f1f8511a23622b4ba737c4","first_seen":"2026-09-11T03:36:12.259586Z","last_seen":"2026-09-11T03:36:12.259586Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/cashout.functions-Da6_R8Nt.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.605Z","timestamp":1789097734605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/cashout.functions-Da6_R8Nt.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8948d37130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1164,"size_decoded":1129,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1164), with no line terminators","md5":"cd7f0968f6ea624a88c9c010f0ee21d4","sha1":"b3b1263f811391dba48e133f0acb8e763d8cb0af","sha256":"34b15654da12a031f306c4202a2d5f957694f7273702d141526c8085c68a0702","sha512":"1e24d05bf65e6e7f5683a26d64b431fc82a1cf39032478cc61249eb39ea2dc8d2573e223b5b8251d5fce80352effa6f1655650833d3df0c758ae15b1afe1a646","ssdeep":"","tlshash":"6d21be1f3a8e46f94b18c5c8ea52362d407b1e68cbba9e981c24096603f31e134cf243","first_seen":"2026-09-11T03:36:12.260555Z","last_seen":"2026-09-11T03:36:12.260555Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/x-Cof8cGiq.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.788Z","timestamp":1789097734788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/x-Cof8cGiq.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/assets/Nav-CtHokHYa.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8a69547130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":648,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1e3d9250c5b44538b278f70c37f7e06d","sha1":"4f4af77edf15efb7cb3dc4ab028fa1ea8829f179","sha256":"e75885292fdec0c862c76f9de0654eea48d0f7e2e1085eb757e336210c7129ca","sha512":"8c86901d9cb992625543bf8b6983d563b89e96d0000b4d645202e053fad61a182c2d6f046a6c5314562e1c808e6e46239c10914f25d595e79ab3263172819c70","ssdeep":"","tlshash":"c6c08cbf1da55ab000050280116aac0083c268ac03a30e16311002381f80080bc6df62","first_seen":"2026-09-11T03:36:12.261511Z","last_seen":"2026-09-11T03:36:12.261511Z","times_seen":1,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/_serverFn/1e1d432c7adbea6066a12b54115349876c37f6510132d644c9786f026543a859","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:35.059Z","timestamp":1789097735059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /_serverFn/1e1d432c7adbea6066a12b54115349876c37f6510132d644c9786f026543a859 HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/x-tss-framed, application/x-ndjson, application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nx-tsr-serverfn: true\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:35 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702535.1tHM1IDpFAxBs0QWBOoqjBH-Aj_NficJisXvRxzmfPw\r\nx-tss-serialized: true\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8c1a167130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":736,"mime_type":"application/json","magic":"JSON text data","md5":"c87a0226c77602361bc3a9c3646c623c","sha1":"c79a12393a326b0d153454428765f7f4c637e93b","sha256":"f36408fb4e22a7fc633a84a166dc0cb4b65be1b416511ef31f6e098773ef8a2b","sha512":"977336da5746d21d514063ca1bc28d633a00fc720eaae130c0933b3e84993e1ac3e1812775b3878eed84694dd02f97cee8e2b6a014c73cc8827a8a247f9cdcbb","ssdeep":"","tlshash":"640168781c1ba93fb687bc1195bbe89bcac116d91fd186c0c6ddca5c13c1249a312f76","first_seen":"2026-09-11T03:36:12.262646Z","last_seen":"2026-09-11T03:36:12.262646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/utils-0j-bkYGk.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.592Z","timestamp":1789097734592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/utils-0j-bkYGk.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938c17130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35188,"size_decoded":12278,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35184), with no line terminators","md5":"fe774cbbc22222b497dd3f0ce6f4c3bd","sha1":"63354526a10ff275df83c114ab79321844473d0f","sha256":"f3f07863abf0177a2f617ba4bfd5929e2de742e954a30fe7873c26acd7cafd15","sha512":"f4337c097fa5925ebb83d504dd6b785445c762419b31c29a4353c7491d4655c7e3d5ee500afedc0a5fcf185aa1ee14f301fdd025f784af41bfe0b392210bab52","ssdeep":"384:SNO4zn2LnNGEuJIzpl0gLtnPjkNHDO2EOTaUF0RkjitiNbtWsFh8TJJN:KO4zn2LNTuJU2eVPjkNH1v0RwIg8d","tlshash":"62f229677102256a16ffe253d15cebcde6312712ca0ec704f2520f309b79ba59696f0e","first_seen":"2026-09-11T03:36:12.263604Z","last_seen":"2026-09-11T03:36:12.263604Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/cash-out-BtfBcQz9.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.596Z","timestamp":1789097734596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/cash-out-BtfBcQz9.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938c77130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64626,"size_decoded":16320,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63992)","md5":"dc4f72408998695c2a172ebb70c6fb4a","sha1":"583f15acd39a93c82e279cce57c849b80fc6fe58","sha256":"59e0658dc86e618f94c63295cf032bf0e31c1cb77278851cab2fa96c16ec8d10","sha512":"99fc72a0dcc7b25da1765740edc0b542b69bfa4a7b67eac165cb2dadaf1d030d96e306e50d59e42ee1a4e7d3844e5a20e30068cb526333e5039c86519006fbb9","ssdeep":"1536:ZTuKtSZhrGOUClRQpxlaLaWilZmv54X6RpmUDLdXqphikn0t4lk:ZTugGLaWilQv54X6Rp/LdXqzn+4lk","tlshash":"8353f8c63756b0100bad919614b91543e3aaba9c161d54adf4fa80ee7b9cc81e3b3f34","first_seen":"2026-09-11T03:36:12.264955Z","last_seen":"2026-09-11T03:36:12.264955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/__l5e/assets-v1/c177be26-5ba1-481e-98d0-de77c53cbb98/Revcash-logotyp-white.svg","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.612Z","timestamp":1789097734612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /__l5e/assets-v1/c177be26-5ba1-481e-98d0-de77c53cbb98/Revcash-logotyp-white.svg HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: attachment; filename=\"Revcash-logotyp-white.svg\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\netag: W/\"b01465ddbb0aedac0b6375f3c9665380\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8958e57130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4915,"size_decoded":3092,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b01465ddbb0aedac0b6375f3c9665380","sha1":"22183fa71c285eefecb3394679b20173a7a92c1c","sha256":"3605efe735836afdd7aa37437a897f5f4782f54e2fa7f4091c31cf1299a3a9b6","sha512":"16e4ef1b864d121cb3f536feecd6f00734eadfc115cfdb9b8b529fbdf613d77bb56a1edc97f274e4e8cd8c5c3ff8757aa257efb407800f294a66ed46257a9a3c","ssdeep":"96:fDPhMnpecEX3VB6RIgPiYPSrT6+jrhKV1EJjHPMy1P1sruObXqw2Kwtv:fDJMoHnq6rTX2Wlx9FKaUwR","tlshash":"ada1e6dda3e49dc80c48cbd43d2291fdb46f277764e0811ec5aa4ee4a4020ee5c8eac6","first_seen":"2026-09-11T03:36:12.26612Z","last_seen":"2026-09-11T03:36:12.26612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/index-ClrxVo0k.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.589Z","timestamp":1789097734589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/index-ClrxVo0k.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8928b77130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":525003,"size_decoded":151369,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53836)","md5":"207237953fc06ee6dcb92a13b940e543","sha1":"93b8902387d2ced6ba912652ed2c9a9d678243c3","sha256":"2e1557762df5d837570ce12b8bf36859dea11e1492de983b52c76aa26fdbc7b1","sha512":"2444c182fd8d41b7afc3655700840ae4a2b67243dc7c6d52a94b75e05e2290ea684d74853f32c32d68d284b29dcfaa854009c2be0334144686158d2942211239","ssdeep":"6144:YMGGTSermtvSOQiqWx04mp+LvWXnjfdxK726FuYHYtGyiZNIYF2ZWsqzP1w8fMKZ:YnfQiYwy6xYcygkfvykm","tlshash":"20b46ee833a6b5230bd641b2907b1502f33914566c0d0428b678eddf76f5849e6bbfb8","first_seen":"2026-09-11T03:36:12.267089Z","last_seen":"2026-09-11T03:36:12.267089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rev-cash.xyz/assets/matchContext-BZDfJvgm.js","fqdn":"rev-cash.xyz","domain":"rev-cash.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rev-cash.xyz/","date":"2026-09-11T03:35:34.595Z","timestamp":1789097734595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rev-cash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 12:04:15 GMT","end":"Mon, 07 Dec 2026 13:04:08 GMT"},"fingerprint":{"sha1":"C3:9D:F0:CE:0C:08:23:97:AD:E2:A3:35:7F:D7:C4:BF:D1:1A:1B:08","sha256":"27:A6:BD:C8:1D:B7:50:AF:9F:55:BB:F6:54:55:36:2B:A1:C9:A1:10:B4:23:78:5A:96:B2:E3:69:7A:E2:B4:00"}}},"request":{"raw":"GET /assets/matchContext-BZDfJvgm.js HTTP/1.1\r\nHost: rev-cash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rev-cash.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702533.pptJkcILFtrcFsDzM7yoAZuKnnjynI0a2B-KEE2h8TU; __cf_bm=DYevdB.Fij6inWcgHJ8mGz_rnaQqspc3DpqbR5tKE1k-1789097733.3819973-1.0.1.1-42uAQ.x0t67XVyP6lKdp413vskGjHVjTjPDS9xpNJzN_LjmC7kunY2ZsgR1rd5ew8MtkY6JaP6Yfhh1uICdiJknTf_lALVsYbEj8fmAOVwHoo055lNxXGtk5bh1pbQOs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:35:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.ee22600d-c36c-43a1-a2e9-25606df14f2a.1789702534.bjU8mbN9fzOJVW9rV_bpsbug7UNSCz8INFl-1YGSLRs\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3939f8938c57130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":672,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f2392614c639276a1917613390db528d","sha1":"5d844a5f573a6798d3c8e87fef4178a10f6d14e2","sha256":"89dcff5aac44096694959d1704381f606eba4b6d686760a18ed35cb45d750393","sha512":"2ab9c5dccd27d660a6c2582c673489056cf6167e9e6864b88d57d24c5e12149b737c848335df20f44eaf071f27481f5ac8946bf605739d07591e54612e4da8de","ssdeep":"","tlshash":"c8d02209e94001b07aba4cdbc036c0b2d370b0591398dac8800749aac2d6a8456bfd62","first_seen":"2026-09-11T03:36:12.268394Z","last_seen":"2026-09-11T03:36:12.268394Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"rev-cash.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}