{"report_id":"ffc9b6a0-9083-4760-ac24-3076ebcc9ea4","version":0,"status":"done","tags":[],"date":"2026-09-15T13:50:58Z","url":{"schema":"http","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"title":"Robinhood Exclusive Cashback","dom":{"size":21096,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6846)","md5":"58303eefd1ef80c7398039cf495b9e09","sha1":"02f42aaee4f54288de7be2e1452d19ede092c3e2","sha256":"b32e77c8f4288c0f895480bf1178895d897ee2773b591a7f80e0f611aceb40c5","sha512":"9a4b100277da500b679bc389f1df43471eba2d2ca14ce48b99c745bec1653437e5f2f7378d707fa0ae527b33c8515bb5968716347259a743c32652cc887c4d82","ssdeep":"384:0z/g/PRvMynJ1ljWW68bI3Ee9j6AupZ7GIxGO+fXHoFoSJTInLGfgHiVaQP/9+YK:O8GEeZ6LZ7RUO+fXoFoSJT1+Yod","tlshash":"b692092661f720315523868d77976f062e29e003e506c8253bed43998fd6d99ecf33ad","dom_hash":"domhash51838eeed5919829ce00b514d63b57eb","first_seen":"2026-09-15T13:51:09.737023Z","last_seen":"2026-09-15T13:51:09.737023Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T13:50:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"finder-lookup-consistency-transform.trycloudflare.com","ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2026-09-15T13:51:03.777356Z","last_seen":"2026-09-15T13:51:03.777356Z","alert_count":0,"request_count":2,"received_data":50213,"sent_data":1352,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-15T13:06:09.954433Z","alert_count":0,"request_count":7,"received_data":1225754,"sent_data":3990,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-15T11:06:52.746021Z","alert_count":0,"request_count":7,"received_data":1101556,"sent_data":3804,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"63.187.209.201","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-09-07T12:17:28.523347Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1157,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"cashbackrobinhood.com","ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":12,"received_data":1377150,"sent_data":6072,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"zennnnnnn.xyz","ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-08T18:17:57.412337Z","last_seen":"2026-09-08T18:17:57.412337Z","alert_count":5,"request_count":5,"received_data":1076437,"sent_data":2783,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2026-09-01T19:48:59.144648Z","alert_count":0,"request_count":2,"received_data":1405,"sent_data":1095,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-10-14T08:21:38.366182Z","times_seen":949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9417c4791f3b7e371d8b1b6876d62073","sha1":"255d95ab23430fd3ed72ebf33ccab9b5946031be","sha256":"2519048d6332633cbf176333f69b119545a7f71c742cffb1da2a0cfe8469a6a7","sha512":"cf100108b6d36ea466cbfa4fc569f1874edbd1b145a8711d195e667c466ca87d70ceb5acf609fb7e49c2d35c68ed57fafd913970efdc43bd39f0f532af6792e4","ssdeep":"","tlshash":"96117baa71a7206006d392663bc3a2443814a0033856ecdc7e4d81144fe7ea5d0abb88","size":1011,"data":"","first_seen":"2026-09-15T13:51:09.770348Z","last_seen":"2026-09-17T03:39:32.738707Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finder-lookup-consistency-transform.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"finder-lookup-consistency-transform.trycloudflare.com","domain":"finder-lookup-consistency-transform.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f543fd9ee8564336972d4cee46e0063","sha1":"0a79fbde28e7b168d7089aaefa9fc06a6f34b61b","sha256":"46807db56bb3f6f4844f9a09637379cf656cf31deb27b6e7036cb4b1e1e04350","sha512":"28c66147b9ada7bb96ec7cf68330924f01660ed3d680e7d6d98e7513d89aa8d905d6943670d34a4d16c041c0abdc75b99a4c48c55fa5b91ecc5dea5b18024fd2","ssdeep":"768:hEmJVHs4gJh4Dsk4bhomv4zZtpN+L0+BF0yx20dq2tKn18aRdpdne5QSyR4ypaKD:hEmDs3rwsWmIpN+A+BF0aM18aPbOypaQ","tlshash":"c223d1cd58b21159439c2b5c6c0fd984fc3c5fa921c88a3ba949d0a5ffb078d58aed74","size":48607,"data":"","first_seen":"2026-09-08T18:18:04.390952Z","last_seen":"2026-09-15T17:37:50.283565Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"finder-lookup-consistency-transform.trycloudflare.com","domain":"finder-lookup-consistency-transform.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95c7ee1f82bb5ad7dd5955eacddb848f","sha1":"0e8a7919c1c4f454bc872bf460bc149680fe7ca1","sha256":"692a82b01a2a0a90b5ef7d9c55bc460f576738ddd8c37aade7780ae4037b61a1","sha512":"300a93c63c8820f63d0c9d8ca33aef31cd6220640ac45aa04860941513a6aff819845dc0a0bb39c6b59c6d34b2f77e5f170f96cd1b7b6cbc4cac79d3b9ab439c","ssdeep":"1536:4eF2aRy9M3y1h6ThhvEr20bV+VyentT6rOmqarWCyeizISn1rFq16pY+:zF2aRyOyHqhvEr2eV+VyentT6rOmqarC","tlshash":"3b43935237d469b0230b8bbb773bb5f1ea2e0daf74a44c9fd218bc5465a560af9c0530","size":59151,"data":"","first_seen":"2026-09-08T18:18:04.416938Z","last_seen":"2026-09-15T17:37:50.295779Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-10-14T08:21:39.280192Z","times_seen":958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-10-13T13:45:01.984194Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-10-14T08:21:36.216639Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-10-14T08:21:37.518906Z","times_seen":961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-10-14T08:21:34.226139Z","times_seen":956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/d60aa74878.js","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10979d85c1a2eb02ef39f446522dace0","sha1":"220e25d72321a1da4015428c1d5ac17c8ea0e94f","sha256":"bf98ca342807015360c058bfd3d183ab04d7aba6096923901319312aeee00456","sha512":"92af5575a9e123d12f16c0530c497e90e268d1cb726443ee28d609f95b144e4d765d0cff3d6d1cfd1c94c56462fb193e6e6167e103f1db1e22f2bd441bba7990","ssdeep":"96:dc5OmAjY+L+lbkqym14/C9muyaMoAy2mF2vh7vC5ECcx1T9w85UrSBzKPJn6:658jY+L+Ft4EmuyanpAvh7vC5ECcLR5Z","tlshash":"4fc188847ec0e58d73928b76122f20c9f27e680994e94d87f714bdc0797e926c6d2e74","size":5747,"data":"","first_seen":"2026-09-15T13:51:09.765697Z","last_seen":"2026-09-15T13:54:06.607749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5e23018294212c730b9e6ad536b8f654","sha1":"da7a95e0d53373307b924eafca3a13adf3468fea","sha256":"fade61796839b4ada4f3e3b02dc0811fb0abd66d544bc052db6ecb176bf31976","sha512":"d3dcbc4e999bce0accf0423949d20d8313468c91f0578de3ea57ddc90d66939e553f95f1e87f1555f6efd5ab9e847665db6dfdae3756af0944356b5e8a8ac3d4","ssdeep":"192:PbC+sU9Z8T/uhFGe47pyesbbfZVykdkybg9N:6bunG17g9blVykdtbg9N","tlshash":"1cf19c0331d6b54f11ca873e3659a7e581a6d20ada4ad90af348dee9b4dcc937e0c1f1","size":7841,"data":"","first_seen":"2026-09-15T13:51:09.781687Z","last_seen":"2026-09-15T13:51:09.781687Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1dbaf8d53731add6fb640e5cceda2ef4","sha1":"8ee36613109e82ca724f5f44f9c84982d47ab893","sha256":"aa121fbf312328209b119eac75a490d4e42e9280cc2be66e93b9660a2517c236","sha512":"ad65d044e740688aa4d9be2d145cb1ac1ca508a347147a6aad657075b284b771e54956e4b5660f4c752f2c13b3977a536db811f808ae63a31d8b1ba6440f9073","ssdeep":"24576:pI2XGuRHgFIVqgpWevwX2RU0UXekKKZ9mOaedZaHsBqDKjB:ThHLB8bufWJzB","tlshash":"df3502ad4c334664578c06fc7c5b0bc839a86bdca0d8a72a5475e0b277c96ff10e6867","size":1072747,"data":"","first_seen":"2026-09-07T19:07:15.478595Z","last_seen":"2026-09-15T13:54:06.651637Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1f9a6ae71d24750b155b63857821cf5f","sha1":"fd90dd5dc45b7748d56158e276985f4a65df6308","sha256":"106b74e32246a71121a513ab8e3bb5e0ddde0c34ce1385ae7b078c7c89fdd0ab","sha512":"c569f7be30da8e7926b37449db1af28e0576322e4934ece3b50305081d912afa9779c3994c44c2e29252ba1db80630e0fcb1d0902add14a4010a228f8db7005a","ssdeep":"24576:oCy0Q9fFdsY7yiwuGCphRZuKrQVJ8J8dqnj9Sr5peS1F4eIUXO9eqXKk0X0do/Dx:KsY7yiwuG2ZuKrmM8dqnj985peS1F4eL","tlshash":"7375d85163c06c55234b9fbb731bb4e5e81f096f78580c8fe114bc606aea617fae9930","size":1561614,"data":"","first_seen":"2026-09-07T19:07:15.470968Z","last_seen":"2026-09-15T17:37:50.302835Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"finder-lookup-consistency-transform.trycloudflare.com","domain":"finder-lookup-consistency-transform.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-10-15T06:24:30.187841Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-10-13T13:45:01.994553Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"WalletConnect Core is already initialized. This is probably a mistake and can lead to unexpected behavior. Init() was called 2 times.","filename":"https://esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","line_number":35,"column_number":141549}]},"http":[{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:27.340Z","timestamp":1789480227340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Tue, 15 Sep 2026 13:50:27 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 3\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a3b819bd587056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":614,"mime_type":"application/json","magic":"JSON text data","md5":"b29c40e1a8d83f4c52ef0e0b2e0d513e","sha1":"9f963d8d33d45b20e33699fe1025f98cbed20c90","sha256":"e31886653eec3e868e9b1e61dfda82880dbfc95e9412bfcd839a21d2b0a74b11","sha512":"e65dba347f81f9b92fcf9c8246826030c4bbb5ea13f425fd2f0c4f6e14297d7bd1e3eab4670d3c472e842282ee8e91238ccdde9f7c8a6b4cd06c894774353197","ssdeep":"","tlshash":"b3d012d0060f0ab1e09ccc405004730123227d894ac41d42084c0fd111443920317220","first_seen":"2026-09-08T18:18:04.407092Z","last_seen":"2026-09-20T22:58:40.445524Z","times_seen":27,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"finder-lookup-consistency-transform.trycloudflare.com","domain":"finder-lookup-consistency-transform.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.077Z","timestamp":1789480229077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: finder-lookup-consistency-transform.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-type: text/html\r\ncf-ray: a3b819c7efefb4fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":769,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"344736d7cbb42230c47fdd836d2edced","sha1":"fe4ccc93f8d977421be1b6045a66f97c33440178","sha256":"54e4cb50a198da50e5b876646c124bedd9c3fedad91f71f45650f464c1b5b1f5","sha512":"162fb66dfcb0821d370119d7d5860f4a01ac3f4df421bb3476d242f528f0d0af6bd26b343708242ce1f4c002023b640236feab57e65cf6bf95804ba80bf58c04","ssdeep":"","tlshash":"8f11dd850d57007105f38a9a3b5f7e05b3a2924a40c0c5003bfae2b7afa3e4bc809ad8","first_seen":"2026-09-08T18:18:04.397346Z","last_seen":"2026-09-15T17:37:50.281743Z","times_seen":29,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":10,"connect":2,"send":0,"wait":321,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.446Z","timestamp":1789480229446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3b819ca0cddb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190142,"size_decoded":31488,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c62ce44113509a7bf7219d93b981b046","sha1":"b69dd45669d66c2e787d85a72bfa3d5831b4322c","sha256":"b448042e17b5aca5f7f8a90c46da62351956a8fca71cb5c58f55e62ef0e63e81","sha512":"b6bac82b8b74e1a5b4c98ce49fa089d21ddc8f81de107281d6c685a2fc49438bc75bda9de07e0175c6f951e5cf893df92ba8a2f633a26252dcdda93f15f85f1c","ssdeep":"1536:KHtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8y03:KvRWzd3T7waCU15Br9LmW03","tlshash":"bf04536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-15T13:51:09.739787Z","last_seen":"2026-09-17T03:06:34.445121Z","times_seen":5,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.292Z","timestamp":1789480229292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3b819c91cceb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":28156,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"06362c886329f1afad4c324d6f1a785a","sha1":"11c077188fb54d97126153a7d48027b0741789c1","sha256":"594a39904e905944d2043f921dced32523a69d6cde50303bc0acd7901bcbe3bc","sha512":"127f81c3514a6dd339ccc85f9b979facfc063980943bbfef1f9ac7370ed02e1734256270d3ecb95e7259685264d5061e0963403a06a1dfe099562fb87473b155","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9ji:Gu+4PCuielkAnaK/p9ji","tlshash":"b9f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-15T13:51:09.740933Z","last_seen":"2026-09-15T17:37:50.254758Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:29.686Z","timestamp":1789480229686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finder-lookup-consistency-transform.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\nlast-modified: Tue, 15 Sep 2026 13:50:36 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3b819f38eb7b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":731,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-10-13T13:45:01.994553Z","times_seen":249,"resource_available":true,"data":null}},"time_used":6532,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":137,"receive":0,"ssl":6390},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtucTlibnRDZGJhUlRzcGhmQ1BUQXQ5NFhKZVJZQWVQaTI2QkN6cVVudUVvMyIsInN1YiI6ImUwYjhiOTcwMDc0Yjc5ZTYzMjZkZjg1MDg2YjJkMjY0ZTQzMWZiMjQ3NmUzNDkzZTJiZTdhNTk5ZjRjZjYzZDUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTQ4MDIzNiwiZXhwIjoxNzg5NTY2NjM2fQ.8_LHvijro870R9GPjwSrTJ5aiGG6gPH7_fI-TjvJLqLFs5sBwOYWammmsisM_HpqM_Z0PZplMKjyGL98yHVQBQ\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"63.187.209.201","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.797Z","timestamp":1789480236797,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtucTlibnRDZGJhUlRzcGhmQ1BUQXQ5NFhKZVJZQWVQaTI2QkN6cVVudUVvMyIsInN1YiI6ImUwYjhiOTcwMDc0Yjc5ZTYzMjZkZjg1MDg2YjJkMjY0ZTQzMWZiMjQ3NmUzNDkzZTJiZTdhNTk5ZjRjZjYzZDUiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTQ4MDIzNiwiZXhwIjoxNzg5NTY2NjM2fQ.8_LHvijro870R9GPjwSrTJ5aiGG6gPH7_fI-TjvJLqLFs5sBwOYWammmsisM_HpqM_Z0PZplMKjyGL98yHVQBQ\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: GSXAtlfYpt2LJdulvp+jig==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 15 Sep 2026 13:50:37 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: il9ZYHQ8Sd2yDBpiu3USJus8H4A=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":369,"connect":387,"send":0,"wait":28,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/images/image_ff4f12270a4e8b9373e76524ca6340ab5edd0a9b.png","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:27.664Z","timestamp":1789480227664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /images/image_ff4f12270a4e8b9373e76524ca6340ab5edd0a9b.png HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 836\r\ndate: Tue, 15 Sep 2026 13:50:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":836,"size_decoded":1151,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"30d774e3c1c151961d96907db8677b11","sha1":"ff4f12270a4e8b9373e76524ca6340ab5edd0a9b","sha256":"5e86fe428e28d11c4db11f7353262ac660ab6a80d728adc68b839951fdb675e2","sha512":"0439b347aac3d6d2fe2b489acdf01dbfa97624436770eec93441be0a60c1852a1a3c6ef7acdb23486082be13d63044b4fff3a83f6461a4d4c27232c17f09cc13","ssdeep":"","tlshash":"2a01d693ce0104b5e75b074cc5c44916f93c2c95af642fab8d4e900d40801851dbfba3","first_seen":"2026-09-08T18:23:29.302203Z","last_seen":"2026-10-13T03:17:35.240502Z","times_seen":34,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.253Z","timestamp":1789480236253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a3b819f49801b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381217,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-10-13T13:45:01.984194Z","times_seen":248,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/fonts/font_78eae8a823f461192b4df2d67d7eaa818cf09b5a.ttf","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.282Z","timestamp":1789480226282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /fonts/font_78eae8a823f461192b4df2d67d7eaa818cf09b5a.ttf HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:26 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 324820\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":324820,"size_decoded":325137,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"a32ace5dba8400232b84bc017dcc38ef","sha1":"78eae8a823f461192b4df2d67d7eaa818cf09b5a","sha256":"1b08e7fc267a5c7e1d614100f604b83e7e8a0be241f0f288faa2b3ac93a683ba","sha512":"7885b898af0ce9b260017dfa483ef7641bdab7383421f51fe7215840eeb9c0a0eed9a8ce28f1f1c88590ffd6a76deedfc37e106ee1e1094af7404966fe41d251","ssdeep":"6144:Jxe0kGmW8XF53q+DREk6wPtE+nr1kfmq+HpvaQCRa14UYE0o:/e0kGmW0FGkZdkCvyR+0o","tlshash":"98645b27e723935ddb452d35cfa2c3a43775bca1bc57a20b70aa3a94c88b1b45dc48e4","first_seen":"2024-08-15T00:58:33Z","last_seen":"2026-10-14T14:51:26.405501Z","times_seen":1510,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":627,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:28.373Z","timestamp":1789480228373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:50:28 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9eh5ocR4fjNnCZs%2F4QxwR50z5z5vFNKSUAuyYQzcPPGE6mEPnAkkw9gw0o%2BAyvKdKFiNMZPcLiHewrN3yMYlyssMhnHdbGEIQMkyjZ%2Fv%2BKRs0YGzbykj8hF9Bnbkxo%2B\"}]}\r\ncf-ray: a3b819c369f0805c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":670,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.073Z","timestamp":1789480229073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3b819c7c98e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226146,"size_decoded":31900,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73749f0902c1ab13e7bbbc8f8746fc88","sha1":"e7035dc2b40ba007e6ab7c5b166534780a18c248","sha256":"63d996493ef371262635921f76d12f2433776a85a85ed13c3ca2d77a7c06da44","sha512":"e8b6ff7e471e814b22b1548ef7fcf52094c0ec6a67d8a07de5cc24d8f19670c95200ae7b819b536e2f74485c37507128ea6180573573563c1723da4154ca2a40","ssdeep":"1536:tYvKFTcstXp1WLFaLYSG+DZHixh1BsNJxZvTM6RZ:tYiFTcsNpwLFatixh1B+JxZvTV","tlshash":"c624446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-15T13:51:09.745516Z","last_seen":"2026-09-15T17:37:50.262449Z","times_seen":3,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":85,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"finder-lookup-consistency-transform.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"finder-lookup-consistency-transform.trycloudflare.com","domain":"finder-lookup-consistency-transform.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:29.495Z","timestamp":1789480229495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /assets/index-f2H8W9Sl.js HTTP/1.1\r\nHost: finder-lookup-consistency-transform.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a3b819ca5b2bb4fa-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48607,"size_decoded":36440,"mime_type":"application/javascript","magic":"data","md5":"4f543fd9ee8564336972d4cee46e0063","sha1":"0a79fbde28e7b168d7089aaefa9fc06a6f34b61b","sha256":"46807db56bb3f6f4844f9a09637379cf656cf31deb27b6e7036cb4b1e1e04350","sha512":"28c66147b9ada7bb96ec7cf68330924f01660ed3d680e7d6d98e7513d89aa8d905d6943670d34a4d16c041c0abdc75b99a4c48c55fa5b91ecc5dea5b18024fd2","ssdeep":"768:hEmJVHs4gJh4Dsk4bhomv4zZtpN+L0+BF0yx20dq2tKn18aRdpdne5QSyR4ypaKD:hEmDs3rwsWmIpN+A+BF0aM18aPbOypaQ","tlshash":"c223d1cd58b21159439c2b5c6c0fd984fc3c5fa921c88a3ba949d0a5ffb078d58aed74","first_seen":"2026-09-08T18:18:04.390952Z","last_seen":"2026-09-15T17:37:50.283565Z","times_seen":29,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.249Z","timestamp":1789480236249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"v139\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a3b819f49fdbb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10635,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-10-14T08:21:36.216639Z","times_seen":818,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/fonts/font_b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc.ttf","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.315Z","timestamp":1789480226315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /fonts/font_b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc.ttf HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:26 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326468\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326468,"size_decoded":326785,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"c59d7314123c3b770bfbbd994215805c","sha1":"b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc","sha256":"b37284b5701b6b168dfc770aa1a4ac492106422fd3ba76bc7641e37434e8019c","sha512":"30ca9372127d8269c5697175ddf4b0e5b3f903b556c6c15673c8c6cd09d8c318e048fe4879acd4d28f510ce6ba1c02db8b2f71374bfde7ce4a3263a94a97ebc4","ssdeep":"6144:MFccVkGmW8XFu3q+DXiMD3E+nr1k42hEysvzVwcZ2P+U3j6jCf:MlkGmW0Fyiodk42hEysvqcZifXf","tlshash":"6c645a1bf722935de6422c38cab2c7a437717ca1bd56e20b749b7b94cd9b0b418c45e8","first_seen":"2025-09-18T00:55:20.188069Z","last_seen":"2026-10-14T14:51:26.372908Z","times_seen":810,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.509Z","timestamp":1789480229509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3b819ca6ce3b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65434,"size_decoded":11857,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"304f83b6c54eb254d0f9bc886e923156","sha1":"7f548aff3e6807c2b5055c3c4ec380b9c9cc2649","sha256":"6a93784f4acfe9127711bbd3922e2cebc9321ef0c9bcf3beacab6ff3db40bb09","sha512":"366f88429ed37090f6f0538429a363af4cb981e3cb57df95307a3d0540124b22c08f58fe3a21f70c3998a8b032955c945b9e9db7174aa181e5e4a7cba34c73ca","ssdeep":"384:x+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW9AJUlpuj8Q4yMupI:BcEv+U1lryV6w+5WCFjSII","tlshash":"ca53846b8f04ee762bb2138d515c79eca64f2117cdca9cf6e2d1cf1440b4af7216219a","first_seen":"2026-09-15T13:51:09.748416Z","last_seen":"2026-09-15T17:37:50.284105Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/style.css","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.104Z","timestamp":1789480226104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 00:28:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2729\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11107,"size_decoded":3089,"mime_type":"text/css","magic":"HTML document, ASCII text","md5":"77f436dc53f71e6e9ffa6cc82d8ad24c","sha1":"b4be8dcfb07ef85661fbdb225b24249e8dc8c44b","sha256":"8b1dc5c063effcf24c3061cf97dc95bcb82506c0244821e83c583dd22bea3e19","sha512":"a81dfadc83e443c0f18f96bd5196e3d6978bd395ab0f92e8ff0907e41fa8ddc9deb5db741596961cdb30d92e30a988916d6197a0df1413361d77f8e94e555e1e","ssdeep":"192:AJoJR3B4ror9YTqjsr/eFX18u+heFXKY+qsBhqSfMgLj276htuxOQCptPMPTEgOh:AJIPc/eFl8CFdxMhY76htu8QCptMPT9y","tlshash":"c93250c667b81918b82f99a47a579faa331c6047820acbbd4fe0101c9ccd1f66672f4d","first_seen":"2026-09-15T13:51:09.749521Z","last_seen":"2026-09-17T03:39:32.720403Z","times_seen":5,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/k46o1gntwsf.4lhk8rma.js","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.286Z","timestamp":1789480226286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /k46o1gntwsf.4lhk8rma.js HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1510,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-15T04:25:13.595337Z","times_seen":159216,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/fonts/font_78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73.ttf","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.317Z","timestamp":1789480226317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /fonts/font_78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73.ttf HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:26 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 325304\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":325304,"size_decoded":325621,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"eb0312411b133c48049ac630ab7f1fec","sha1":"78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73","sha256":"8c883f63b2c4157d997319f2c8bc6995ed4357ef371940d31ca159004a4aae63","sha512":"d79527b4f0e7b43908d6ca69e104f9ec464023e9f5767f62decb532318f36a0a4b044cde66dd96a9f1eb0b2c4a1c82134dfc8d5c6f9b7ac1ef491454e63edf9b","ssdeep":"6144:LqBkGmW8XFE3q+DUe9MS3E+nr1kBCJWWUmQEEAwlokfVo7GiPKU3+OaT7Dfs:KkGmW0Fve9Rdk8WWU30KU0k","tlshash":"01646a27f723d35dd6462c38cbe2c3a033797ca1bc56a20b745a3a95ce9b1b419c45e4","first_seen":"2024-12-14T17:19:05.431584Z","last_seen":"2026-10-14T14:51:26.382485Z","times_seen":1371,"resource_available":false,"data":null}},"time_used":1241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":753,"receive":488,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:27.345Z","timestamp":1789480227345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Tue, 15 Sep 2026 13:50:27 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3b819bcf86456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":1,"connect":14,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.202Z","timestamp":1789480229202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3b819c88c251a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165456,"size_decoded":28028,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2bf26c7e20b4027643dc300525efe935","sha1":"2b947453f15ba7452d56e4052e99cbca0ba9dddc","sha256":"b30a6264e809a41c8193935de8311f9a5f50f20709b38995851bb8cf5d090746","sha512":"6a3f923d3bc57de27902cf76b0479a9e335897e3c47922086eb0c87fd6ac01215ec69f7cb451e8602410ca2fbde47fd8e42d12ba3f9b1ba1a95234d864129e94","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF1Iiz5K/naLu49Qmqgpec:ZFVz06UZgEx8eIiz5K/n6qg4c","tlshash":"def3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-15T13:51:09.752189Z","last_seen":"2026-09-15T17:37:50.253435Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.210Z","timestamp":1789480229210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnXXKroCefSUMW5WObmf16n0NIO2%2BRoKRnwHuiSG8uNoLbUozUC8Y6%2FiKMjhSbRP7gAHhWQWLq%2F2Wx2tLksM6HensEwlt9%2FjAoyk5LnWmTMKYKd8lQZQc7TFg00mdvDE\"}]}\r\ncf-ray: a3b819c89b66805c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":668,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.238Z","timestamp":1789480229238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3b819c8bccdb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183275,"size_decoded":29504,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"d8476d0d868f89966631e573e47c7b0c","sha1":"5e61caeb33acde12d72d91c7a1f58cb4801783f3","sha256":"ea1ec80a89c9ab60ae75971c2d532935da6e59d56f37f81b75a5229da5b5df72","sha512":"ff47b7e391de3d0a1be31730f2080162d31f432014c2968a28556da7d1d471ab38710b363f871bd803f8840ef5a8048afe3beb595da4d08ff6719da18ff625f7","ssdeep":"1536:wD6iwBGGnXRyNxQpuCpnEZB2sfPEzW6+0ASgSzra:wD6LgXQpuC8PEM9SLa","tlshash":"2304526e8b04de662fb25388d15cf9eca15ee117c9cd5ca2e2f1cf3440bc9b7215219a","first_seen":"2026-09-15T13:51:09.753342Z","last_seen":"2026-09-15T17:37:50.28923Z","times_seen":3,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.250Z","timestamp":1789480236250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"v139\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a3b819f49ff5b4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5136,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-10-14T08:21:37.518906Z","times_seen":961,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/images/image_8f757c8affb66fa1bcc4f49f66d8773825c1f31b.png","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.116Z","timestamp":1789480226116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /images/image_8f757c8affb66fa1bcc4f49f66d8773825c1f31b.png HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35670\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35670,"size_decoded":35987,"mime_type":"image/png","magic":"PNG image data, 1440 x 282, 8-bit/color RGBA, non-interlaced","md5":"d544af1ce573d0f43069de47ea1b31ae","sha1":"8f757c8affb66fa1bcc4f49f66d8773825c1f31b","sha256":"26f3c0f37cedad3ad22448f2aee3e9fe8ac359e62aec8f03b8f9556130389516","sha512":"e636850dd389341aa777ec780d82211eefdc3808ddc0525c315fa63acb41b00baf3ee024dd9d1ec84d26e30b9de5b54e9d7b52b0a9f0e2f855d4f27a0bbee7f6","ssdeep":"768:a9OPbx3Fr6O5l078/OA2RqRoJeTLpHxigITX4PXGCu64SBrO4:A0b996O5Q8mANoEbigITXUXf64","tlshash":"c8f2e14e640be443cf8b0d664dfaa17b4e3a852ee882bdfd15f69aadfd4210500e11dd","first_seen":"2026-09-08T18:23:29.295607Z","last_seen":"2026-10-13T03:17:35.270563Z","times_seen":34,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/fonts/font_1048573ec372a0c4a60bd3d5b3ab3b82bc3973da.ttf","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.313Z","timestamp":1789480226313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /fonts/font_1048573ec372a0c4a60bd3d5b3ab3b82bc3973da.ttf HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 22 Sep 2026 13:50:26 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 14 Sep 2026 23:58:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326048\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326048,"size_decoded":326365,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"84cf795ee940a39423fbee3dad4017c1","sha1":"1048573ec372a0c4a60bd3d5b3ab3b82bc3973da","sha256":"e7a1aaf7eda9f2fad4131725fa556265ec75ca7b2d756260173a040363e8d4f7","sha512":"e276355be5d939caa93c6417048240550d47bf9b5375e54955e9855acf1647a36b1ecf9084a0817be92cfa8266f3b32d229691f467f838575bc2a904a14efb4b","ssdeep":"6144:Eb9pkGmW8XFh3q+D2aLMs9lE+nr1kPLN5W6+8/WYJ0Km/ZpDfik:EkGmW0FyaLfdkPLm6+8u3ik","tlshash":"23645b2bf723d35dd7052c39cab2c7a437757ca1bc46a10bb0aa3a95cd9b0b019d49e4","first_seen":"2024-08-15T00:58:32Z","last_seen":"2026-10-14T14:51:26.37176Z","times_seen":1024,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.348Z","timestamp":1789480229348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncf-ray: a3b819c96ccfb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222558,"size_decoded":31517,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a6e369ef05f0e6728d5ff4de1cafae9c","sha1":"2dc819d9b0c526a93e4152023960cd615b4621d9","sha256":"ea660f32951bb77ec384b90a9f518bc663fde679022e8df6149500cf570cad5b","sha512":"1a087c052d2177441175b5be8a2c40d58c98320ae716fb16800caba4500cb6621cf71099020f256c242497d74aa781b06581544a1a441e9a936f63a342523d97","ssdeep":"1536:pbinZhimNX3XFQ9LujpygGWudQT6bjzeFedLE:pWnZhimNnEC9B3udQCjzeFedI","tlshash":"5e24656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-15T13:51:09.762846Z","last_seen":"2026-09-15T17:37:50.263831Z","times_seen":3,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.252Z","timestamp":1789480236252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: W/\"v139\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: a3b819f49ffdb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3853,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-10-14T08:21:34.226139Z","times_seen":956,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.421Z","timestamp":1789480236421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v139\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3b819f5af343181-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1928,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-10-14T08:21:39.280192Z","times_seen":958,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://finder-lookup-consistency-transform.trycloudflare.com/?host=https%3A%2F%2Fcashbackrobinhood.com\u0026href=https%3A%2F%2Fcashbackrobinhood.com%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-15T13:50:36.434Z","timestamp":1789480236434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://finder-lookup-consistency-transform.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v139\"\r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:50:36 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: a3b819f5bf373181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":698,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-10-14T08:21:38.366182Z","times_seen":949,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/d60aa74878.js","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.105Z","timestamp":1789480226105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /d60aa74878.js HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 03:35:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2256\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5747,"size_decoded":2544,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5747), with no line terminators","md5":"10979d85c1a2eb02ef39f446522dace0","sha1":"220e25d72321a1da4015428c1d5ac17c8ea0e94f","sha256":"bf98ca342807015360c058bfd3d183ab04d7aba6096923901319312aeee00456","sha512":"92af5575a9e123d12f16c0530c497e90e268d1cb726443ee28d609f95b144e4d765d0cff3d6d1cfd1c94c56462fb193e6e6167e103f1db1e22f2bd441bba7990","ssdeep":"96:dc5OmAjY+L+lbkqym14/C9muyaMoAy2mF2vh7vC5ECcx1T9w85UrSBzKPJn6:658jY+L+Ft4EmuyanpAvh7vC5ECcLR5Z","tlshash":"4fc188847ec0e58d73928b76122f20c9f27e680994e94d87f714bdc0797e926c6d2e74","first_seen":"2026-09-15T13:51:09.765697Z","last_seen":"2026-09-15T13:54:06.607749Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/k2c6z0sphqd.2e3gb58v.js","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.106Z","timestamp":1789480226106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /k2c6z0sphqd.2e3gb58v.js HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1510,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-15T04:25:13.595337Z","times_seen":159216,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/k46o1gntwsf.4lhk8rma.js","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:26.108Z","timestamp":1789480226108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET /k46o1gntwsf.4lhk8rma.js HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cashbackrobinhood.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 15 Sep 2026 13:50:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":1510,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-15T04:25:13.595337Z","times_seen":159216,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:27.481Z","timestamp":1789480227481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cashbackrobinhood.com/\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:50:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jYC9apmheWY5YwdTKuX4wEv8%2BoufvzjzO%2BB2f%2BGe%2BIGwG3%2FweauaNt%2FAdeJzlcQTCAKf%2BnEXFE7vY0n8qAwFoXmbrVJgpIiEysdNOMXew5tF1EZijD1sjYIkQwtZw6O\"}]}\r\ncf-ray: a3b819beb821805c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":674,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":0,"dns":116,"connect":31,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:28.371Z","timestamp":1789480228371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"RRNyTHuv8Ek32v_wiPFa\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:50:28 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7S0A2YGzelzU5Cs0g%2FfSvOJt7vxEpp3BXLeMFU3tk5sCJFGs2lFxCQNc77J7J5Gcf8PPDB1mPs4M8mrioS5W4A9koQyocjX9UxmDLRKYC78GyF%2FHhkLRJHjBYewfJ5%2B\"}]}\r\ncf-ray: a3b819c3aa07805c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1072721,"size_decoded":826926,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25643), with no line terminators","md5":"25838392a2494bef87653623e98f8dcc","sha1":"cfd3444228012a7f52f87767d9911aa1923308f8","sha256":"49985cc0ca3eac355ca4c7670e495ccc20162d7ef1be9f3358baaa2901b4bb8d","sha512":"5272e2163e2e36c8fbe6eada26fc525457ee34500de5b5ea3c61afe3364f3023b031cc9ffd7d710c0d03300c4ef946bffee29dc0c27fcccb766f1e86f615fc39","ssdeep":"24576:KI2XGuRHgFIVqgpWevwX2RU0UXekKKZ9mOaedZaHsBqDKjq:WhHLB8bufWJzq","tlshash":"e13502ad4c334664578c06fc7c5b0bc839a86bdca0d8a72a5475e0b277c96ff10e6867","first_seen":"2026-09-07T19:07:15.375139Z","last_seen":"2026-09-15T13:51:09.767231Z","times_seen":13,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cashbackrobinhood.com/","date":"2026-09-15T13:50:29.208Z","timestamp":1789480229208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cashbackrobinhood.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 8f01ac96a6db2a2704155544634c9b1e\r\nContent-Length: 1316\r\nOrigin: https://cashbackrobinhood.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:50:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZejsGDeDDUIzCMKlMzPBk5t3Zs0ARROkjtOA5hmDlqqmd3liVe7utcrffkT7Om%2FNekhPQRibTCZKGT%2FSRZ%2F%2FMZFY%2FeVKFoxMAKbczjU9cbz5A%2FGn54kirqr63hZ5Th3\"}]}\r\ncf-ray: a3b819c8eb73805c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":971,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"43a8ba94b28ba1a39c301feefba41e47","sha1":"2ffb9c8830a27d9ea5f6042a0c0cca68b05f00e3","sha256":"f7f83f690d44ffa5c10c1341a82bb8e0ae03f78e074bb18b4e7e33e038466c9f","sha512":"d928291e853f01f463a834fad3f77c62d61a7375ceb30206be22da718dd66508d5d054c7f7da0a63b3643ab1a223cceb3c2e0fcc1146fd9cd3bf43e008fe3d49","ssdeep":"","tlshash":"edd02b80473ac4340783a574143da19075b21d586093116b54b6350e13250ad52c2512","first_seen":"2026-09-15T13:51:09.767946Z","last_seen":"2026-09-15T13:51:09.767946Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cashbackrobinhood.com/","fqdn":"cashbackrobinhood.com","domain":"cashbackrobinhood.com","tld":"com"},"ip":{"addr":"198.54.115.214","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:50:25.083Z","timestamp":1789480225083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cashbackrobinhood.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Mon, 14 Sep 2026 20:46:48 GMT","end":"Wed, 31 Mar 2027 20:55:12 GMT"},"fingerprint":{"sha1":"10:CC:51:28:75:59:44:3D:90:B2:B0:4D:E2:83:9A:5C:B5:96:33:5B","sha256":"53:1F:35:2F:79:77:B4:17:1D:9E:78:7E:FA:77:57:DB:D1:68:92:85:FF:61:AA:5E:40:45:E5:3A:7C:28:1A:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cashbackrobinhood.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 15 Sep 2026 03:37:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7334\r\ndate: Tue, 15 Sep 2026 13:50:25 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13790,"size_decoded":7616,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6847)","md5":"6d5020800d83bd83d8de4efa6e95b43c","sha1":"0d1a6eace614cecbf5391e0c307352ce9315baf7","sha256":"043439d229d74f991020a8555866bdf00a704ac5028ca43a2aaed8c1911da71c","sha512":"642c6855f9a9331f97da364b661e29ae08206d6446bacdf27351889d2afeda63638eb480fc8759bdd4a28128a280cf1c5e5176bfe0e4a4f73df40209efc8496e","ssdeep":"384:J2lT8bI3Ee9j6AupZ7GIxGAsnLGfgHiH/bYP/9+V:28GEeZ6LZ7RUAq+V","tlshash":"23523b65f0f65132116283897667bf162e48f003d6559051b7ad8be80fe6ea1ecb32ce","first_seen":"2026-09-15T13:51:09.76908Z","last_seen":"2026-09-15T13:54:06.609681Z","times_seen":2,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":13,"connect":160,"send":0,"wait":315,"receive":0,"ssl":326},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"cashbackrobinhood.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"cashbackrobinhood.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}