{"report_id":"00f6a98d-d8ed-4169-9e34-af12a3e6d666","version":6,"status":"done","tags":[],"date":"2026-03-22T14:48:42Z","url":{"schema":"https","addr":"trustkard.vip","fqdn":"trustkard.vip","domain":"trustkard.vip","tld":"vip"},"ip":{"addr":"104.21.30.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"paytrust.live/","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"title":"Trust - Your Private Crypto Card","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trustkard.vip","fqdn":"trustkard.vip","domain":"trustkard.vip","tld":"vip"},"ip":{"addr":"104.21.30.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T14:48:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"trustkard.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustkard.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-19","domain_rank":0,"first_seen":"2026-03-22T14:48:43.532138Z","last_seen":"2026-03-22T14:48:43.532138Z","alert_count":1,"request_count":1,"received_data":47555,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webtrack.sale","ip":{"addr":"104.21.62.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-05T23:26:42.853157Z","last_seen":"2026-03-20T21:15:43.120201Z","alert_count":0,"request_count":1,"received_data":905,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"paytrust.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-22T13:14:44.020078Z","last_seen":"2026-03-22T13:14:44.020078Z","alert_count":17,"request_count":17,"received_data":14216822,"sent_data":7390,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paytrust.live/548cd5df56cbbe772234630ba82718bc48edeb60.png","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /548cd5df56cbbe772234630ba82718bc48edeb60.png HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/png\r\netag: \"d9b41e719f1a670928067723380d3039\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0w9tYFrI%2BAgjrqbjVIgeCl2IZvgU2YfXvdoDsvHTf8uHYAcDcNMOLeubkk%2B8RsgY7ACW8XknkH8%2FtcXOoRmmYtLSIDVaj0ioFArumig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff256982b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 763 x 518, 8-bit/color RGBA, non-interlaced","md5":"d9b41e719f1a670928067723380d3039","sha1":"548cd5df56cbbe772234630ba82718bc48edeb60","sha256":"49982d38a3213a9e764c67f5376adfd185748f011f149083b1ba4ad643b7bc25","sha512":"49ab26332083cfd498aab0d7fa0cebbf770c02b0092f9d6905018679dc8a5ebe066fa59ee6a4937599a6dfe94ba793e31b1b608b698b01655c3439927f4a2ca9","ssdeep":"3072:tdzqbVITOtA+AIG7IsOIwbTCvdRN/WU3Nu0pU2I1vdFlcD:b0iOm+S7IC+GvlpuCU2I1xq","tlshash":"0be312da4759e35425ade3f23f19dca3e977a8c3d1b336ec525002b07c703a8c8665a6","first_seen":"2026-01-10T14:02:29.67497Z","last_seen":"2026-04-28T13:46:00.709922Z","times_seen":821,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/325294dfe8267c63104646d60cdce3e201f6d7a0.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /325294dfe8267c63104646d60cdce3e201f6d7a0.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqLQaEkX8jll4YXCvFi0CcPRA27YtmZiONqZAZE7Q3Clbly4zYmXjvJdXxqeqaP%2BOpHK8LG%2BvVE4iK37fp2Nr2u%2Bgrj34Ea%2BzkdArhU%3D\"}]}\r\netag: W/\"1645fe9e4e50c926db510f45d2670378\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff256988b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1645fe9e4e50c926db510f45d2670378","sha1":"325294dfe8267c63104646d60cdce3e201f6d7a0","sha256":"89f90f697ecb81bc6558e7a4df1abee65c3e45238e818631b14960c55e6b5ab9","sha512":"c569f384e77c296765cd60c630d8ac05d09e006b057e01f1a6940359d9b76cb3c62f613996be763b7fbd365c9496253ac985d1c2777e5977bbacb7e1775ff9f3","ssdeep":"384:jz7cy1KpXqwovhEqTjOyf731s1uhjNo8JNoXuhGYZe9YZ6iSqHmC/k6O+VgaCqG:jz8AVTjOyB3teC/kZ+yH","tlshash":"32a2b7ca6b385dbcf1c74fbadf2479e8200960ba0e2917d4813ea07d1657dcdd61ac94","first_seen":"2023-12-20T05:41:29Z","last_seen":"2026-08-06T11:27:12.922952Z","times_seen":903,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/75894cf8e5d238f788bd1d0fb258dac88c5b0126.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /75894cf8e5d238f788bd1d0fb258dac88c5b0126.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7NCfGg7nZ1wzLJTpu%2B2FcNNF9Jszw6Z2fMUn7gTU8tWFAPVyBQS09E7U1km2SniXX6gyltsBwq4Ecdm1qd9rAwPs%2FV81tD9%2BZHBi00%3D\"}]}\r\netag: W/\"c210d79d224dc0acca1c3beeb029195b\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff25699ab7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c210d79d224dc0acca1c3beeb029195b","sha1":"75894cf8e5d238f788bd1d0fb258dac88c5b0126","sha256":"d1207a3591df9b2c69e8f08c29200283571c5744774d8e008aa3835957652a58","sha512":"d82594ace6a3cc531d7430a0d55cde548f4273f2ff170b51a93fa1c980baf3cce40bac295cdbfa444827666d7f8276860b854eaa4dd91bcbab07b277be2af6bd","ssdeep":"48:HRryHV/3wZy0xVsTtmv4jb3bU9UN6Zjamv4jbo6H9kMndH9XHO8laGH9XHO8eH9T:HdOAZrVsTsv2brHM1jv2bx1PL09EXud","tlshash":"86a176eafb2c9cbfe82787bccb48e1f5504d61d664c08368c2799f1e51046cb591aec0","first_seen":"2024-12-07T17:47:59.744392Z","last_seen":"2026-08-06T11:27:12.901682Z","times_seen":928,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/9fd5c01757e2b33b05fb4160160042a43bb00d4c.png","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /9fd5c01757e2b33b05fb4160160042a43bb00d4c.png HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/png\r\netag: \"43d6d80383584c0352e833e73fd1a1db\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQo26koDJZhGn%2F3fJSHq0XH5uuDHrm4Dg6P4AhBHDnCsF9l7Nq3X250MGvzGiPorhJ5t4ORkR2usO102yfsnFHRwjD4vQKTFZfklyv8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff259a1ab7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4306 x 778, 8-bit/color RGBA, non-interlaced","md5":"43d6d80383584c0352e833e73fd1a1db","sha1":"9fd5c01757e2b33b05fb4160160042a43bb00d4c","sha256":"512d9435396205c125b69901aa7c5af87c6893a1b0fea13c8a2b2874207c7c49","sha512":"1d173d3cf03cf2863a4cd814160574f88e7cfe93b6df2ad32d0325eb7f883e77e79617a7e068344a949937a11dc8f3f818210f867a9a916bbf6605bcd74b2d81","ssdeep":"6144:BGEdAx0hJjgDEkafFT3T5sDuCXCublZ/bwfyK5f5Olgf6QORxwCw8W:EEexIJjgD4dwCublZ/P25V8W","tlshash":"4d34126a8c075ce6fdc6c036a52aaf043b32746e1c1697cb03be5f360ceb14790c96a4","first_seen":"2026-03-18T15:48:56.51086Z","last_seen":"2026-03-22T15:17:32.798536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/assets/eleven.js","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nlast-modified: Sat, 21 Mar 2026 07:17:32 GMT\r\nserver: cloudflare\r\nage: 5637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLpPmpTkSiTBjCWdOY8BLGKboAAi1H9I1LKenzb%2FGxXPmRIYHZKcHgp%2FvZZpyS3ttz7c%2B7rLWWkHtuP1JNyQ2dc6qvnTh1WatQiKe%2FY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6862b274681a8fce2c60f7cbab8859bb\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff25696bb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10707874,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef85eefe6d6907a1c3fb17ba26d2c142","sha1":"248b0acf7877f826b455370ad924a1ae3ba307b3","sha256":"ed66749e25cde3a299d54870db0f1490d8e97c47f844c70a37ef6013e813fe56","sha512":"69a0f5e8850ac36e7448c6c34440f9ae88f48368f289216b397217fcecebd68171404c5ed4796558b00d9198b2a77713f2b60ec9ad880684370e47aef0cfa997","ssdeep":"24576:oA6q9DtJvJk62FCxIYFy/W5OwJy0k1CnsF0kZ:o2C/Z","tlshash":"7d25f8db3d9679a6023234f73d262056f06edc49b15cc198f3adbc29f95070d68bb628","first_seen":"2026-03-07T01:25:58.928789Z","last_seen":"2026-07-08T10:42:00.72673Z","times_seen":149,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/90e234e481359853e1a3d40644dff49ce20f5934.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /90e234e481359853e1a3d40644dff49ce20f5934.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5680\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOs5I5BOPb83HUWT3Do4VMt7aEw1IWB%2FPLgFZIgMYTUdpxQ81wQ87aXXTN0UZpFC6hCS9Y51sHXD8pbe5KUes%2BvT6AFuOJfT0FZx7GE%3D\"}]}\r\netag: W/\"fbda6fe9682d63433ce25aec010fb362\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff256999b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbda6fe9682d63433ce25aec010fb362","sha1":"90e234e481359853e1a3d40644dff49ce20f5934","sha256":"c6a0aa994362014ebe33193d0e9a16ec866d3787a32300c030f47fc45e2f4724","sha512":"a65f2964308672761d0c1d04eb449206231cbb1e9fa220937a89fcdf6f50339c037b42f56a7643d91edc2d7397bd5beef20ba1ef613cd9afa25f2a741b9d7f83","ssdeep":"192:SW2pQeCBWg8geYl7ByksxaThcuDNoMmNquwn6J9c3D32WMVwnNNqRSB:+oPsYVPZDmY2kju4Y8B","tlshash":"4122c7caf32869fdf6d34f59db1072b4260a303a0e66536c813d8d3c1a8560ee51fd90","first_seen":"2024-10-12T13:56:58.711689Z","last_seen":"2026-08-06T11:27:12.8992Z","times_seen":921,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/31540228a6b9ddc6cd4701720fb9b53210cb1e4f.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /31540228a6b9ddc6cd4701720fb9b53210cb1e4f.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Tx%2B26CXwql%2B3ryzKcOrxPEPH5U%2Fmw1UQH%2F1HBFFtifuFAoguU7Qet4TJtvxsW2bB%2BU0vWWIgswgouOWPb5Y5pI27vOO%2FJvwoosxaqQ%3D\"}]}\r\netag: W/\"e1e6944c95750e2f20dd0902e8065b2c\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff2569a0b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e6944c95750e2f20dd0902e8065b2c","sha1":"31540228a6b9ddc6cd4701720fb9b53210cb1e4f","sha256":"018c0cea41d585a7b4190176e7a18128a89e1aee685ab9e763741f376081b995","sha512":"e88c0f52743f841767e457a627248ddba418dab011ad59ef302b67a2da15908c8cc5045112348acd125fbbd83f236d4681fc64f54834d29ba6525718657d2699","ssdeep":"96:y2dqoNJZEMhiFeGnITA2dqoNorYvjfLVOgnXpv5pwYHBrhwYpWUoqZB2n+jOdFRf:hdqY38Z0dqJsj5v5iYZhv1Cr","tlshash":"3ac1c8d57734b9bcf0e70be9df10f9a4304e70761a559388c3a1ca3541969ce992bce0","first_seen":"2024-10-12T13:56:58.696978Z","last_seen":"2026-08-06T11:27:12.916499Z","times_seen":891,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustkard.vip/","fqdn":"trustkard.vip","domain":"trustkard.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T14:48:19.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustkard.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 11:33:51 GMT","end":"Thu, 18 Jun 2026 11:33:50 GMT"},"fingerprint":{"sha1":"1F:F4:03:0F:00:FD:BE:45:FD:B3:7D:8B:E9:73:22:BF:6C:06:3D:77","sha256":"71:38:DC:C1:15:60:A2:1E:8E:F5:4B:95:6F:7B:A6:22:23:06:7A:78:1D:C0:AD:99:D9:07:44:2E:24:D9:AA:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustkard.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 22 Mar 2026 14:48:19 GMT\r\ncontent-length: 0\r\nlocation: https://paytrust.live/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yX%2FEUitJQCYIkJj9Qx3Jqo7mxyKYzEd542K4NY1LWhxuVSVrHP4laOlEjLdbau4moO3sXnyNdU5dPOK%2Fjg0HzrMxlp6%2BRdeTFzQgbDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e05ff21ba05b80b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47080,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":45,"dns":19,"connect":8,"send":0,"wait":110,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"trustkard.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrack.sale/p/62gzAzvto","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"104.21.62.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrack.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 18:10:06 GMT","end":"Wed, 29 Apr 2026 19:08:34 GMT"},"fingerprint":{"sha1":"8E:FC:0A:E5:97:B2:4E:A3:87:2E:8E:9A:B4:5D:E0:A3:61:5D:10:69","sha256":"7F:7F:F1:87:6D:42:3D:55:EC:EB:05:40:49:36:73:C5:D8:69:AF:D1:A1:DD:0D:FA:2F:D5:C1:16:B3:0A:E9:18"}}},"request":{"raw":"GET /p/62gzAzvto HTTP/1.1\r\nHost: webtrack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-dns-prefetch-control: on\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ll17nsGrIy%2BHU2HyFEVQQgONfxL6Vi1Ck0xHdT%2F3fzLatB3ELsRXALpA6DXsNrS1lFgzxplyyuKpphmtPqefquYVgkt%2B6E6CLQ1THc4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e05ff25a81e76a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-11T17:22:10.58068Z","times_seen":96509,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":30,"dns":0,"connect":8,"send":0,"wait":80,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/f0b4c3fcac90fdf5fb7eb7e1026a79586d5fcaae.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /f0b4c3fcac90fdf5fb7eb7e1026a79586d5fcaae.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6A%2F0ZJyJKiYsji08nNL%2F%2BgH8K0K%2ByrbiRFjcXOlVhy81i7Eyiz11tHA5HUcXVWd2M9xNMA2eJKchEQrniiD3o%2FdyJIs0O2X4RT3nhyw%3D\"}]}\r\netag: W/\"8a14d9bb432e57219f83425475cab0e8\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff25697cb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a14d9bb432e57219f83425475cab0e8","sha1":"f0b4c3fcac90fdf5fb7eb7e1026a79586d5fcaae","sha256":"c9b42ab8c54c70771224ec2a1319358fe54fa8d5eac6e7adbca92ca5165b1f45","sha512":"d57fdd6ff2f0d6ad48478c45596a5637cb1e56b5e7e4ccdd6eb1a49202652f345f4a46c487965d8ef57f17b1452f7dc5754b406ca2111a33b55babbe6e2ef381","ssdeep":"","tlshash":"0db0122c818c8508d414ca28e8f48841505b9082475405eed1c036077225c5368662ed","first_seen":"2026-03-22T13:14:49.241149Z","last_seen":"2026-03-22T14:48:46.983561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/dc5fce55c6b738fe4b4d34ee14d539ef1741c77c.png","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /dc5fce55c6b738fe4b4d34ee14d539ef1741c77c.png HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 734\r\netag: \"5bcb862683ac8ae7ab8129299dc8b0dc\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lxk14t56t%2FCKLf8nTJuZyW7coZ9zzIt%2FKgyXsK42RiXgmFxF0bieiTmhOVN2WbKJblkFTJWUAOPD5VuLynJkDLhUBdLI9dP7%2F6%2BzqH0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff25697db7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5bcb862683ac8ae7ab8129299dc8b0dc","sha1":"dc5fce55c6b738fe4b4d34ee14d539ef1741c77c","sha256":"fc44d80d6db12638ec4d231a530a025b78cca1505e74c525822f277412b08c00","sha512":"c32ee8d8f672c9234b0411030491c20308cf0404dec78a01c6c0ac2034d95d35a250698ee8fa9843617c65c66d2a359e370f34289ac2b39a79a25047998e886b","ssdeep":"","tlshash":"46017584b165f42ec8a86a138907d241cc0e818c8a4b3a6517f406fb108671000e4906","first_seen":"2025-01-03T04:12:35.302667Z","last_seen":"2026-07-06T23:44:29.826752Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/dff7963c2b7cc0a95b65d777bae56e7cf8a762f1.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /dff7963c2b7cc0a95b65d777bae56e7cf8a762f1.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5679\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olDn9sMJm2Ha4qVMWmMKOJTtA75RN4nJo4WaGdF99GFkZKoLSgiUDYxn%2Bfu9qJjAlkXG2hu7COmL5oO4uHOTHAyFuetzCyVJD6T2yYQ%3D\"}]}\r\netag: W/\"cda874259b72818dd657fdc8e026f343\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff2579a8b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda874259b72818dd657fdc8e026f343","sha1":"dff7963c2b7cc0a95b65d777bae56e7cf8a762f1","sha256":"00d4932ea31ede39a2d7348985c6dd5416b54e19fda923b866b5fc435e2d6c82","sha512":"3002edc71781a68f7b90c19806eb740e4708436510896f74f7e225fc851f87e111776a99fba399e6b1142862b02713e8c763398668f591267451b2ce5afe5276","ssdeep":"96:ArdFO+fLClvKoyTjtgI95CfDMd/kPpxPL:ArLOIyioAJ95CrM1Ovz","tlshash":"a0e11ece37440cfe7e26079aef2a72b9102255fb2d886200c53b1a79158165ead3fec4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-09T14:00:53.549015Z","times_seen":1140,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKls8ITV1Uu4cj2pX5kSM509Sb%2BjPtSFHy5d%2B9HV7aZir5QKM7KYHsbN6KfSy5WwXFssZVgXX%2FtEdPIvJhn2dKDxiX5lPpOqTVp%2BRTw%3D\"}]}\r\netag: W/\"94df810c2ed1a1fbb3d89f767b243411\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff2579c5b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94df810c2ed1a1fbb3d89f767b243411","sha1":"fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a","sha256":"1a07b51df7cce62e8d728ca85759d6a735fff8f54144660fc2b7206b9cf194a2","sha512":"231fb23bbe4cd8a1754f265ff7a4af7444cba4c6a3680fdeb7f49520a3822ca8e779e155373305aa192b35fac82a2c08930d1d4396dda2865cb5b191b686644e","ssdeep":"192:KAcdLt0TAR3pxOVpjWjZiO4NgCAtZ6wzvRx:3cdJ0UR3TgjWjZizqZV","tlshash":"8a220dce3b145dbcf93287a6db02b3b9202b49b707e56310ce361a79640195ea93fdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-09T14:00:53.545835Z","times_seen":1140,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2 HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paytrust.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: font/woff2\r\netag: \"260c81a4759baf163c025001c4f27872\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5637\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRBO9blJWALxozv8o6cxetjphBcXz3Mvym5soSNVU8xP6qjejHiOkimf1uUTSVC7y%2FCnm2kdfaWJiBhlxTGa2fToihWMRWdY%2FFhFHT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff259a2bb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-11T17:52:04.994349Z","times_seen":26327,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T14:48:19.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:19 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ICVHRpl%2Bwn9e7nVV1VYOva5BPvHUwlre8V%2FnrzrysfAdurH0G58rRTm5saE1GI0B6TVwrpXlulhANe2UbCNeGZKGRvDrJe%2F7E%2Bdw074%3D\"}]}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e05ff22bb8b96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47080,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26136)","md5":"3cf14c35a337fe83a0e1dc9f6175c59c","sha1":"207bead388c0d271efabb5c92ab54b5cb0280108","sha256":"fa064f8a3beb7e0b8f9fa07403153351973f175a84f24044ea88f13036dcd265","sha512":"14e7578588cb7a5db5c9e6137fa74eeb3f39b847eccf8a3ba362905a0bc555aa358d14099a06cf549df6169a989bacffbe92a919d3343cb07cf07ae79980d15e","ssdeep":"768:83AsSzqziJdCQ515f9PqcdH9YlaNfeiGYbJ0:83lQCQ53D+wNfeiGQJ0","tlshash":"b123fb324510213ab12b89e6bae3779cf394e024d75f17f696e471ba43db6d212b3306","first_seen":"2026-03-22T13:14:49.236289Z","last_seen":"2026-03-22T14:48:46.989785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":223,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/62gzAzvto.gif","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /62gzAzvto.gif HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\netag: \"325472601571f31e1bf00674c368d335\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjB65qIBawD3w384FajUHPEkIY1hrGIvnbl5FoxFuJWrxqF7Tpb%2BY0K7OcGenun1unmX4I%2BbwIK2AETcER3cG9H1sGL1os8GEWR0xWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff256978b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-11T17:22:10.58068Z","times_seen":96509,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/0f28aa307e29e466174084b4f0abed0f6f10f351.png","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /0f28aa307e29e466174084b4f0abed0f6f10f351.png HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/png\r\netag: \"092f39da4f5d165ccd9f8fd517b46547\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:30 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7X8uF41m4%2FmNRwep0dzkteU9ZgLkNWPuAy9G5pomB6MItMdZ8i2mKcNvgzJEapOGK9qPaHBljC9G4y9nnduO3vVlF0%2BbjZISr5o2LA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff25697fb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2919577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3455 x 3101, 8-bit/color RGBA, non-interlaced","md5":"4eb607c03556865c926c0d972226fbe3","sha1":"cfa0f87619da4428e4274c3964d90fb5b76618c9","sha256":"1bdec3318928a09c9c8d6bf0a9fd119e44fe21644b45ae9161b7f0cdda5dfc13","sha512":"0424aea322be3a0521a8cd9a2aa2543f3c2a3a2601850303299209aaf63cec0b99bcad763f9f9a0e4b3719771a2cdbc5b4a841946f6d57ee5ae58f38fc217edb","ssdeep":"24576:iilvAFYAyfy5PEe273wjmBEQGApgq/MDeu2Sbx32Ig+1Xbvg6:iXF9BCe2LofQ71MDeebfD","tlshash":"d72523f8f14ac194d2e4953ca6795af8633240b8dd412de84632b2b6bfc29858d4dcfd","first_seen":"2026-03-18T15:48:56.517034Z","last_seen":"2026-03-22T15:17:32.799249Z","times_seen":7,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/b67eb4b5fea974adb55977c6cfc42c3ce8b224d4.svg","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /b67eb4b5fea974adb55977c6cfc42c3ce8b224d4.svg HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:20 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9nD%2BeQBb7%2FhjhUdKqxZ4kysWrBAjPHqnw4GYS3q6LbWJkUQKkZlg3RugV73btiOtWw1AVlSuPLHbS4tTmTOilV9VbJlqgQLhhsuq8c%3D\"}]}\r\netag: W/\"83986156dd8df49f40175538d33639af\"\r\ncontent-encoding: br\r\ncf-ray: 9e05ff2569a7b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83986156dd8df49f40175538d33639af","sha1":"b67eb4b5fea974adb55977c6cfc42c3ce8b224d4","sha256":"be5bc71658387110e1776fe9d3a6eb1936d747edbeccef35bca7ef14719e0f3c","sha512":"819cfecc001cd9353ed5ccc8a0dca9848531bc26b61194581e29bd4b782e293a54dc55698e1ba5cdac29fcc7ceae9f6e4803796990be6fba397b7554266e0237","ssdeep":"96:9bEPGTGbE2GIywkC2nkDKk97uu6wW1J88PVyzXUtt00I/bCsQ5ZnQFZnS11FQqk7:pEPGTYEAGkD1hhWH8WOEq5gMn0+qkQCF","tlshash":"c022c8c677385d7dfa934facdf04b7e4302ea07a565e5398d2268a38114268ef91bcc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-08-09T14:00:53.550698Z","times_seen":1203,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paytrust.live/96c0e32d42d46ab090c5087a1e0baf618f7e7627.png","fqdn":"paytrust.live","domain":"paytrust.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paytrust.live/","date":"2026-03-22T14:48:20.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paytrust.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 06:28:28 GMT","end":"Fri, 19 Jun 2026 06:28:27 GMT"},"fingerprint":{"sha1":"80:5C:A3:2D:9A:87:CD:38:46:24:ED:DE:05:57:0E:DB:4C:B9:70:97","sha256":"76:CA:EA:6F:43:28:23:88:91:A5:11:93:80:BE:71:C8:77:2C:6A:F6:FE:BE:05:2E:57:10:71:53:04:25:C5:05"}}},"request":{"raw":"GET /96c0e32d42d46ab090c5087a1e0baf618f7e7627.png HTTP/1.1\r\nHost: paytrust.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 14:48:21 GMT\r\ncontent-type: image/png\r\netag: \"00f314640a70760e560c7781243c48b4\"\r\nlast-modified: Sat, 21 Mar 2026 07:17:29 GMT\r\nserver: cloudflare\r\nage: 5636\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFt7qKzacDKh4HNo18FxVT13QOT7pWCYC%2F5FSFlDdrJUdW4YSTjo39ru2Nz3nqwOvyQkuKdFsGI8cMXQ8W%2FkfvqMrvTvASN%2FFw4g9Is%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e05ff2b3c00b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 132, 8-bit/color RGBA, non-interlaced","md5":"00f314640a70760e560c7781243c48b4","sha1":"96c0e32d42d46ab090c5087a1e0baf618f7e7627","sha256":"246ba40b62913b8dc0a91340f5fe823a716b25b979e022ddece8fb9bd05f4084","sha512":"77a110032616e9ee071bea77d3b27fdca906abf7b29af684919e720fa7a02504de08c0ab18927525b70d3079567d1180655adb2e94ed51a4e4a8f77aff8b88cc","ssdeep":"384:3WAx50nmcPohOa2YopY77IIOiG1LwLbYM/To90hLmG2Xq:75HcPm+Y4Y/3wBQ/3hu6","tlshash":"1672f1deb31dd4f3e93a063c1969c52afb153a5c7bd26780c1d1f68c94b2037c96a898","first_seen":"2026-03-22T13:14:49.247213Z","last_seen":"2026-03-22T15:17:32.800625Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-22","alert":"Phishing Block","trigger":"paytrust.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}