{"report_id":"015052f1-8dd0-4880-a6c8-f0bca2750cdb","version":6,"status":"done","tags":[],"date":"2026-01-22T00:09:09Z","url":{"schema":"https","addr":"user8171.trustpay.energy","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"172.67.148.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"user8171.trustpay.energy/","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"title":"Trust | Your Private Crypto Card","dom":{"size":7978,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (337)","md5":"ef2a2224314e2ed23727e7148c0b870a","sha1":"bbf65014cc9ab331cf9567d63b24b5e4d504d585","sha256":"8d1c4b9296db7937845528979caacd4f243054792f07279c473bd508456548e4","sha512":"9ead006c6606c6668e3aaded6be702b3532289969a80af237557bc94b57a9e10c2950423159932467b92508d0e22a8c58eaf4329767568eec258de985e61f7bf","ssdeep":"96:rhfVU94ftgJtS8k45USz+45ga/+ta89+RzydNA1t9+kex8KdRoZ8I7B1g/M:r3U4ItS8LUSZga4b9wmII9o8IT","tlshash":"58f193a462fa1e3b818386ec74d77509bd11d293d35c28e5bb6e05f10fc7d51980f15a","dom_hash":"domhash5833762d13b646d6718afae55768490d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"user8171.trustpay.energy","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"172.67.148.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-26T00:09:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user3857.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"user8171.trustpay.energy","ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-22T00:09:11.135335Z","last_seen":"2026-01-22T00:09:11.135335Z","alert_count":32,"request_count":32,"received_data":3793422,"sent_data":15078,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":13550,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":2,"received_data":1013,"sent_data":1930,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":382131,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"user3857.trustpay.energy","ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-22T00:09:11.151783Z","last_seen":"2026-01-22T00:09:11.151783Z","alert_count":1,"request_count":1,"received_data":1032,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":4,"received_data":102684,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-01-22T00:09:00.530608Z","alert_count":0,"request_count":1,"received_data":757,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"user8171.trustpay.energy/","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1253535cb790f5cace01c49c50c930f0","sha1":"8ed2024482011249f794da15ebc4cb3a3807bcb0","sha256":"91e2add6a3a0476be1930af98932fc56cdab46cabeece9c84a45bb8634ad1e36","sha512":"678821cb934a4f02e2adbea846a347417abf37962c1248f49fb0c4a5ff418d9261aad46eec914fa21cbd126693858a9b6799d1a9e9ea6ea67f5a9562820a771a","ssdeep":"","tlshash":"e4f05c9f2c03a05233fa223dc32ba66b3762030324c2d804ba0dc4103fd4a821c829ce","size":597,"data":"","first_seen":"2026-01-22T00:09:05.879788Z","last_seen":"2026-02-03T02:42:27.195815Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/webpack-7a469e3698d31c88.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f016d999ce949ce7301ad1d357c4110","sha1":"8728ddd1100a480f9251c3197df5bf6d13b27cf4","sha256":"6b7749c269aa52f352619f54be875e5fbbe4b9daa86cbf288b44e665927138b8","sha512":"3e6ab05fdcaf436b8df4fdb803870d0baa61ce4cb03ced51f820143c96318910f80277c34732562b546c2d5e8a2b8e3e0bfc877f01a67df011a143692cdf0853","ssdeep":"","tlshash":"aa71c4a53661eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","size":3587,"data":"","first_seen":"2026-01-22T00:09:05.827041Z","last_seen":"2026-02-20T08:01:05.515813Z","times_seen":784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/app/layout-ae6e31d5be24263f.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39238a6b3c789c6171ab070116c8450b","sha1":"1bdcdcc5d9cf1b0111e78c9d5803e4ed662b9337","sha256":"d11c31489ed4b66fd411cc22a28398959624b6212f162e0dab5d2b7983af2847","sha512":"54c1ee89430d8d5dbf2e6bcf5a4a10628cc5577e59401a84221e553e6265f801b55cd24683ffc65b2550223186546ba60dd9f1bc7fe94546b514bfc506c2cb48","ssdeep":"192:q3A4n+5cqTiQSTiYdx8xWYFQJ/JcxpfaigAypLqvEEn6gJJJjFf6:q3TMTipTiYdcVFSJcJd7K","tlshash":"7622e9d2f281fd78a53909c4d42b491c321a1f65962f8c60bab9fc9b2195dc8b1b1fcd","size":10545,"data":"","first_seen":"2026-01-22T00:09:05.849596Z","last_seen":"2026-01-22T00:09:15.889103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325456,"data":"","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","size":695053,"data":"","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-13T08:16:39.692639Z","times_seen":186095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17726698187","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2e882bae42f2b7cc3846735678f7f8d","sha1":"854e739fcc152fc3b93a9cd0adde35125c6c15d4","sha256":"382494873a026841786cbc54efb9b124a32c7cb11d99398a58cc4537ea6c0232","sha512":"ea7180b37bbe96b9848c58c439ca60f9b1fe061a4b6cdaa4474d226f16d0cdc2a7abf3d71cd59f84a38f4bbb1ac681b77e0ce226f566a935bb9af983cf44d90c","ssdeep":"6144:0zXo/RsWAhJZEXkEsrzRUKh7K0go3VLXgejIBDEmpx:y4/CWAhJZEXkEAJh7zIBHx","tlshash":"f28419cd73d6702693a2a478403f118ba57b69a2f44ccc95f18adce42e74a9a4137f7c","size":381527,"data":"","first_seen":"2026-01-22T00:09:15.893474Z","last_seen":"2026-01-22T00:09:15.893474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Jan 2026 00:55:05 GMT\r\nexpires: Sat, 16 Jan 2027 00:55:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 515620\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-13T08:19:00.013024Z","times_seen":32259,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":196,"dns":1,"connect":29,"send":0,"wait":15,"receive":5,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:08:03 GMT","end":"Tue, 10 Mar 2026 17:08:02 GMT"},"fingerprint":{"sha1":"73:C7:4E:56:88:E5:CF:72:0E:94:F3:06:6D:8A:AF:FC:88:8A:F9:CD","sha256":"B6:54:2C:1C:36:F9:45:9B:A3:52:B9:CE:D7:F8:5D:38:C1:E3:7D:B8:C4:02:10:DD:4F:FE:6B:9C:3B:ED:4F:2A"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user8171.trustpay.energy/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 22 Jan 2026 00:08:46 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://user8171.trustpay.energy\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: true\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-35\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"56c16bf930a15f1e2d04cae55f1881d1","sha1":"909d3a1d7e115d7146de50024ae645b824c2f8b7","sha256":"ed832ecaab22f33bbaf2f8df9027b8947aed4fc4c2f823779873dd0de323b6db","sha512":"2de11851b01d0d591098e720abad88c3c456ba532cf93625a0194c339463bbd137c902cc93ba83b75ef5719eb66d7240c740989a38b535c0e4aeb27c8813544a","ssdeep":"","tlshash":"16c0928accdde168b30269933dc0f2f2c4285634e7588e14e0010ebedae829e5ade191","first_seen":"2026-01-22T00:09:15.866802Z","last_seen":"2026-01-22T00:09:15.866802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":74,"dns":1,"connect":18,"send":0,"wait":20,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-22T00:08:44.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nej2dpx0E3suH1tKBpqMridmikGxwn3JbA%2Bk4IrckHA1LuZI5EBvsLxHIZutgOxngUwbDKAkV%2B%2FiIZt7eJnwrfuosoiV9eh1wV0jHmx0KqwIDW%2F6TzE%3D\"}]}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c1ad190abaf5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25608,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25585), with no line terminators","md5":"340a5680923b9d2bc274afb947f9612a","sha1":"6ab5ab5c1f13b4b1a4e0b71ff02b0396ab0497b0","sha256":"2b985d9f9b63269f515d9d2468803b045eb88e3308318a7df496d2c8683d0327","sha512":"e61e6918cd1a6c1d2b49f4bb71933dd07b2f94c6b16ef19ea620af6b18dfbb7282e7df432e1c1268472f8de77ef061b0a967299855c78cfc6addc5efd57ee0e1","ssdeep":"768:WrMsvzORqJmGnQIIdFwqX7XhXtXhXoXVodIEQX6X1rbtqMH5Bl:mQQnQIIdFwqX7XhXtXhXoXVodtQqF8MF","tlshash":"1cb2da37b804f923d6335ed9a17aaf7620d6c129c55a8078b7dccb6c07d2d75aa32843","first_seen":"2026-01-22T00:09:15.867969Z","last_seen":"2026-01-22T00:09:15.867969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":42,"dns":29,"connect":1,"send":0,"wait":125,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/logo.png","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 5903\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:05:28 GMT\r\netag: W/\"170f-19bc75708ea\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRg%2BOW72fZIh51vj2nVWBq24ewrPkawre%2BsmVOO5foLcdKNA%2BHmxjOCVH0KT1tPj8AVTyn2GilVTXEuhJd%2Bfs4BTFQqPUkQgSwl3bzrBsjOH0Dz24hucGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c1ad1928d8a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 80, 8-bit/color RGBA, non-interlaced","md5":"e46d5731a7cc58448e0a45dd21153660","sha1":"647655a2eb69253c3ecaf2c0bb0fc2fb1ed1365f","sha256":"18a1e6c63d170b5a7ab8c36c347dca14238bb0bf428f42353324c439206fc146","sha512":"238ea78c6c1d1c9342d65e64047c8972029ff1b9fc7558b74fd3f8350fb1596d78d412d412e1e15be92ca47f7a151d75a12bda58e53f7cf63aa9a3c2a9c7c9e7","ssdeep":"96:BSxKB/OKn9O2RznPFIHQKa2peCppDAK10drUho06sMze5xhaaHekx1Zr7ccG:BSAtOYJIHM2pemp710pMo06sMzfGx1x4","tlshash":"6ac19fe22a24b7f83c96a379c360593c50dd363228464f2f6a60516df81e8fb875951b","first_seen":"2026-01-10T14:02:29.677703Z","last_seen":"2026-04-28T13:46:00.717468Z","times_seen":816,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/css/734e034a887ccfbc.css","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/css/734e034a887ccfbc.css HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-13b8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCM78Zwxk1eCpOlcddLWn0sLPp3gCOaAONs1BVWvr3FKxYYPr1s9%2BS8pdYLi29brv5IGYA%2BhkzOvJ%2FnRi0Br%2FNYSZCxG74Mkn%2BSQAhM4QQxftY55srHTAw%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5048,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048), with no line terminators","md5":"ba3bdb50993068ec6da8f4018cffc0f4","sha1":"1350ec59a4fe0067e5effadde1fe480d412963c4","sha256":"612e61f371c1748529f786db52db2576aeb57106751725784014912271ac45bc","sha512":"3fea457273c2c8e523ae5935b56c97099bd2335c109065a9f41f0587519a6444c73240a9b90ce58a60c0ef97b28383fd7efaee0d389d39839a9a2c6b2b866421","ssdeep":"96:KKkZPJrxXZWp2KuoP283LkBRh7rKvQEISPhqLtfiQM3hqn:yPJXsDr7LktXKvK8heop3An","tlshash":"a5a1332361083118b127da51f8a15e9e3228b603d2639a9dff86713fc9c73758775e8d","first_seen":"2026-01-10T14:02:29.659232Z","last_seen":"2026-02-20T08:01:05.530055Z","times_seen":797,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:07 GMT","end":"Tue, 03 Mar 2026 17:10:06 GMT"},"fingerprint":{"sha1":"82:59:95:33:5E:76:7F:3E:5B:45:F4:CA:83:29:7C:B2:19:B0:A5:C0","sha256":"A1:28:19:D2:C4:EA:69:3E:6D:8D:7A:20:FC:3E:A6:13:BA:59:C5:9C:DE:7D:D1:25:3D:35:68:98:FC:47:82:9D"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user8171.trustpay.energy/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 22 Jan 2026 00:08:45 GMT\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47cabbdecadc902ac84a6d9cee4e5644","sha1":"0cf23e67bb68a8701df2523b103c8614255d50c5","sha256":"6cb6c9324cab91ab024247e2e9d10ec371642dde873cf44af4d7eb455ea3a9a9","sha512":"457609607e66e5747a29792df54244a9b3591770466e4b3f7e03336d705ba78ac1d9fb0d7a4885be1c117a6ffc66e1ac0c4f34283850ef79a1b6a1cb75f0a5c1","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:UmkwU+ME02EQJ","tlshash":"0842a9900027e804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-11T15:36:38.535296Z","last_seen":"2026-07-13T00:45:43.294633Z","times_seen":1424,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":117,"dns":1,"connect":7,"send":0,"wait":17,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026tid=AW-17726698187\u0026en=page_view\u0026dl=https%3A%2F%2Fuser8171.trustpay.energy%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1637760216.1769040526\u0026dt=Trust%20%7C%20Your%20Private%20Crypto%20Card\u0026auid=2113488241.1769040526\u0026navt=n\u0026npa=1\u0026gtm=45be61k2za200xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616985~115938465~115938468~116185181~116185182~116988316~117041587~117099528~117171315\u0026tft=1769040526205\u0026tfd=1367\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:46.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:53 GMT","end":"Tue, 03 Mar 2026 17:10:52 GMT"},"fingerprint":{"sha1":"5D:5E:18:EB:C3:38:2D:9C:25:1D:F4:50:C9:3F:F8:EF:AE:5F:99:45","sha256":"15:C1:31:8A:76:28:CA:A6:2B:C5:FB:F3:7A:63:A5:AE:AF:D8:0A:D3:F9:E1:4A:3F:93:13:CA:87:88:4E:59:A5"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026tid=AW-17726698187\u0026en=page_view\u0026dl=https%3A%2F%2Fuser8171.trustpay.energy%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1637760216.1769040526\u0026dt=Trust%20%7C%20Your%20Private%20Crypto%20Card\u0026auid=2113488241.1769040526\u0026navt=n\u0026npa=1\u0026gtm=45be61k2za200xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616985~115938465~115938468~116185181~116185182~116988316~117041587~117099528~117171315\u0026tft=1769040526205\u0026tfd=1367\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user8171.trustpay.energy/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 22 Jan 2026 00:08:46 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://user8171.trustpay.energy\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T08:17:52.207669Z","times_seen":17208424,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":107,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/29-24b8452b1e7ad86c.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/29-24b8452b1e7ad86c.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-a0f53\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwN3jQ2LKaAEXyPhKRF3wdy4UWHRaTgS1CYo7EGBRBSrYmN%2BjnmCSQtHCrxRUFBDWcd%2F4n0L3a5SDlFBfE2Dc4wmdA%2F6Rvk%2BY4%2FoZv4eLwC5lg03qKI7dg%3D%3D\"}]}\r\ncf-ray: 9c1ad192ada223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659283,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16f00acf83df4682009294614691a0ba","sha1":"0a295061841fac8c9ffae539f621519b975462fc","sha256":"c64963bfab4e2513573ccfd6964476752a58260777a5c041d174042e175679af","sha512":"3add1f68e2d6fe238ce66c9caccc0350c2625bfe7e17f171d81a1a24433d092694afb9e3922922b51dca1569a692943595a8af3a2041783e6578b8ad8ecd9227","ssdeep":"6144:YclbuCQVUJ1dUNp7zF34OIPkjt02/fS6vI+MYdbPSzJDQTb2RDbt1IRtOj85jz/9:YclZQVU96hf/fuYdbqdQmRDbt1IRtFNj","tlshash":"6be40884b7a1f06283a651e1002f500af27de92d944e58e8f3d4dcf27cb899d95baf74","first_seen":"2026-01-22T00:09:05.829174Z","last_seen":"2026-01-27T13:26:58.898126Z","times_seen":9,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/app/page-67fc64f36abf1236.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/app/page-67fc64f36abf1236.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-3217\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGuJYoGYjLTVN4oR1z%2BOEzwwO4jHKALjtFeQwoj9kqgyLDsokQR6LUPbe4cj052vV%2BRL8deGozftB7YPh3HGD7lVywi8Xbra8q3PofO02zMIk8RJq4Ve3A%3D%3D\"}]}\r\ncf-ray: 9c1ad192bda723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12823,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12786), with no line terminators","md5":"3b16640fec7952b163f07e414cd58fa0","sha1":"6465eb7fbd54666eee48b0a7d323b884c48f3c78","sha256":"2e2e7a58d8b2946d09564989735227a0f1128a27c84dd98f7fbea5705dac3321","sha512":"533edb06d1a4361a7a9c151fa37f24572689cfc2e12c40494c8bae44667cbeddc7f0fdb5b4c1ae290ba8c70c4566ab085d571138cb259f7ddf9588c3b7f6d5fd","ssdeep":"384:2ltQA5t+wHZAtkFHGH1o/caemqyx60XD/y/ftrRAWtth3Urcw:wLHGHq3XAqD","tlshash":"d6422855e494ebfdf92b19c459af504c712aaf84cb0a48f0b8bd78240b054f97627bcb","first_seen":"2026-01-22T00:09:05.831316Z","last_seen":"2026-01-22T00:09:15.880633Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/intro-image.avif","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/intro-image.avif HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/avif\r\ncontent-length: 159172\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:27 GMT\r\netag: W/\"26dc4-19bc759c254\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4yomT0WyLVYouD%2BK6qwO4MGF0pz5JpvmgfCSpzixweAwMpiUMaBEd8bc5ijbdesBVEw0HAdFICaBQ1SPr3LszBKqGDlEdUvpYc3R5hXKEvc7xL0dge4oQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c1ad1928d8e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159172,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"77e3c9b2f057c85598255546be9321cb","sha1":"fd799462adae9dbd39365b167ce15e391d1f0297","sha256":"efc10220b84b9e87313c50326e21df82f1c61ca6287b7a362624b3cdf87b666c","sha512":"f34e2ba69f6fb78c7804d5c5ec736a67f8f78a70436f08dbab887acb7df14359d3d584b46669d5cc56963e7fe795e4666061fd214f4b3836612c77bb1a1abfe8","ssdeep":"3072:3I4OafgtarybFxqcH+wnsTuNxZe2rYoP3u/Ql5d5CGLbCTnsKOfq:1SVZHdnPPzYo2Yl5ddAGq","tlshash":"38f312bad602cf85f993be3c310948b18e83d63a797f03735a8ca47d54b9e6e0d01695","first_seen":"2025-06-21T11:37:37.70886Z","last_seen":"2026-07-11T14:49:25.420982Z","times_seen":848,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/banner.png","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/banner.png HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 148744\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:27 GMT\r\netag: W/\"24508-19bc759c2d0\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K92vfRBbJhmfNIK1TMd%2BJ7VPs8Uq9lcYk5g2ZuTFtz4%2FzxnWG3X5JhCWokP5Yl4rPNZ%2Bc15B9y8E6AFU1ByCU%2Ft1G0JU4R4wSupPCVm%2F43qmih2icK%2BpwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c1ad1928d8f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 763 x 518, 8-bit/color RGBA, non-interlaced","md5":"d9b41e719f1a670928067723380d3039","sha1":"548cd5df56cbbe772234630ba82718bc48edeb60","sha256":"49982d38a3213a9e764c67f5376adfd185748f011f149083b1ba4ad643b7bc25","sha512":"49ab26332083cfd498aab0d7fa0cebbf770c02b0092f9d6905018679dc8a5ebe066fa59ee6a4937599a6dfe94ba793e31b1b608b698b01655c3439927f4a2ca9","ssdeep":"3072:tdzqbVITOtA+AIG7IsOIwbTCvdRN/WU3Nu0pU2I1vdFlcD:b0iOm+S7IC+GvlpuCU2I1xq","tlshash":"0be312da4759e35425ade3f23f19dca3e977a8c3d1b336ec525002b07c703a8c8665a6","first_seen":"2026-01-10T14:02:29.67497Z","last_seen":"2026-04-28T13:46:00.709922Z","times_seen":821,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/benefit5.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/benefit5.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:26 GMT\r\netag: W/\"2765-19bc759c090\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bw4xpQFr%2BQUYScHdwjtUpTvUEbHF668gZYJZW8UdKAVMJteStFFTAIn3hUOqoOgU6aoDDro7Dgjn6Yo3F9e0HTzGW2SGbqXGNR2lVExkf00RtqrZN1ba%2Bw%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83986156dd8df49f40175538d33639af","sha1":"b67eb4b5fea974adb55977c6cfc42c3ce8b224d4","sha256":"be5bc71658387110e1776fe9d3a6eb1936d747edbeccef35bca7ef14719e0f3c","sha512":"819cfecc001cd9353ed5ccc8a0dca9848531bc26b61194581e29bd4b782e293a54dc55698e1ba5cdac29fcc7ceae9f6e4803796990be6fba397b7554266e0237","ssdeep":"96:9bEPGTGbE2GIywkC2nkDKk97uu6wW1J88PVyzXUtt00I/bCsQ5ZnQFZnS11FQqk7:pEPGTYEAGkD1hhWH8WOEq5gMn0+qkQCF","tlshash":"c022c8c677385d7dfa934facdf04b7e4302ea07a565e5398d2268a38114268ef91bcc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-11T14:49:25.424515Z","times_seen":1078,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/main-app-65ab0c3ca193b325.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/main-app-65ab0c3ca193b325.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-239\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbUiD1LVo%2FmzBkHh4h52tocs2aBwn8h7oCM8hMYUWha9Yo%2FncXlKpxWG1ppadKBD5xTivHp0%2BAyxrYi5YGE8Z1fLOMU%2Bs2eAo2GLkUxdPKgvOJkvzTGqeA%3D%3D\"}]}\r\ncf-ray: 9c1ad192ad9f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"39b3167778e43b7cfc4d270c336794eb","sha1":"a0e90400e041861c8c91482eae0fa42ccf4674a1","sha256":"9f192e0d2a7a19afc5a78238f0c319c62cbf0988e00d8b4d9b4c6e5c8ed897f6","sha512":"0720ae3e3442d15c828e4ed4eba10954a5e08266f470c1e8cca1856da9d2a336ee1a46c9210d42c2ab287afe09a922576af5756f493cb1311d787e6f80ee6ceb","ssdeep":"","tlshash":"82f0fb5a4f0cf92f5c26ad65fe97ace3185f4179202b4e606901de713c23b6dd2b1418","first_seen":"2026-01-10T14:02:29.687051Z","last_seen":"2026-01-22T00:09:15.884471Z","times_seen":3,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/aaea2bcf-5976f34e031a4e16.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/aaea2bcf-5976f34e031a4e16.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-4f750\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n0bGgq8IbtBmEGXQ8Qe5T7hc565pZLlmcUcZdNIROE4NKmwJ1K4v8bmMxgv8Fv71kuDjXfyzARBhTgNz%2BbbX%2Fr3g4tm5G17tqo0Cuxl7yWA0CxFeZSvfw%3D%3D\"}]}\r\ncf-ray: 9c1ad192ada123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0643cbcd447c26952bcfb7b126e8165","sha1":"7b7f4eaffbdc13106229f606739b8154a8bf0f86","sha256":"033b90b06089e49080c186f6eabd85801ef5792fca04ef9a73ab7826a6332f91","sha512":"a144d3c3d1a407379d8b401283fd69561f8596ec3afea21275659435262388564e73e630f32c1337bf66fb480fe96f1c0313252ee3dd6d7fbc4462c9ff7be64e","ssdeep":"3072:+bhXZujaVoPtiGGjIT4cS043D8WxbGpLsev6nseDok1IsJ0U6oXaQMGm:Qu/GjhfCNvmsKok1PjOQu","tlshash":"6f64f984f764b021835965a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-12-29T12:15:56.367473Z","last_seen":"2026-05-03T10:03:58.56311Z","times_seen":814,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Jan 2026 00:55:05 GMT\r\nexpires: Sat, 16 Jan 2027 00:55:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 515620\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-13T08:19:00.013024Z","times_seen":32259,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":111,"dns":3,"connect":15,"send":0,"wait":20,"receive":6,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/benefit2.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/benefit2.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:05:29 GMT\r\netag: W/\"29ee-19bc7570c2e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vx4e2AoKnIpyLTpvr9ImHPiXGvezpksk5IASmbvB3ttUG9Cuyj0jbrLiJB4vH%2BN1DLhuYot2HsopFGL2Ns5DAOGet1qwQ2WoxrnuRlzuDMRPFtadJUH0Jw%3D%3D\"}]}\r\ncf-ray: 9c1ad1928d9123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbda6fe9682d63433ce25aec010fb362","sha1":"90e234e481359853e1a3d40644dff49ce20f5934","sha256":"c6a0aa994362014ebe33193d0e9a16ec866d3787a32300c030f47fc45e2f4724","sha512":"a65f2964308672761d0c1d04eb449206231cbb1e9fa220937a89fcdf6f50339c037b42f56a7643d91edc2d7397bd5beef20ba1ef613cd9afa25f2a741b9d7f83","ssdeep":"192:SW2pQeCBWg8geYl7ByksxaThcuDNoMmNquwn6J9c3D32WMVwnNNqRSB:+oPsYVPZDmY2kju4Y8B","tlshash":"4122c7caf32869fdf6d34f59db1072b4260a303a0e66536c813d8d3c1a8560ee51fd90","first_seen":"2024-10-12T13:56:58.711689Z","last_seen":"2026-07-11T14:49:25.435546Z","times_seen":893,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/benefit6.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/benefit6.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:05:29 GMT\r\netag: W/\"1b23-19bc7570aba\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrLxniwvWFhEIsmRCHCVZhpShWiXOv4NLZXYV36np9QNuUygLhZXR3bIlFIvfhuXU7ZB8MCStZwg9N4OI%2BgRWW4MghyZCTrMXRTvTsO3wdBqzCMTGn8c5w%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cda874259b72818dd657fdc8e026f343","sha1":"dff7963c2b7cc0a95b65d777bae56e7cf8a762f1","sha256":"00d4932ea31ede39a2d7348985c6dd5416b54e19fda923b866b5fc435e2d6c82","sha512":"3002edc71781a68f7b90c19806eb740e4708436510896f74f7e225fc851f87e111776a99fba399e6b1142862b02713e8c763398668f591267451b2ce5afe5276","ssdeep":"96:ArdFO+fLClvKoyTjtgI95CfDMd/kPpxPL:ArLOIyioAJ95CrM1Ovz","tlshash":"a0e11ece37440cfe7e26079aef2a72b9102255fb2d886200c53b1a79158165ead3fec4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-10T08:17:19.811343Z","times_seen":1024,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/css/4fbad9deea1ef1fa.css","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/css/4fbad9deea1ef1fa.css HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-411b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hICpSmTcnop0kB8IHDzyQ5EX3tfwkchwJOAG%2FYmINbGH%2FBGj2N8LUB4itEkkdOl1bgQvVIQ6zLo6gWEAiRRRJoe90lAa7v2yyqFDQYlPSKd7OfzTNQCCaQ%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16667), with no line terminators","md5":"2d0a2143aac6f815b607554ca2564f79","sha1":"c3ff9f22d08bdda8afa7233200826c212a187e31","sha256":"d53f0e2f90709acdbe6d9020caf805ad64e93dc1f0f63ce044b9b0f9cbef5408","sha512":"1112a55842c9d516c75b69c6ec0e60cbfb09a9209b33a5a78e27d376e4fd1dbda7a846b81e4fbea3ccebd1b1c26bb7f2a26765a13247663fdc7c63d77eec6d44","ssdeep":"192:k0c9Jo5X5lWQ9lTIIH2XqMskR/KKaad6P6bHRMosDgfr5sKC/Yp6zSaBsYh:ke5nIIwQhVDQ5Tol","tlshash":"7f7242319599113df01bdac3b4c2aece7158c903f1a70abeabd921afcec15da4635349","first_seen":"2026-01-10T14:02:29.686104Z","last_seen":"2026-02-19T05:47:37.1221Z","times_seen":21,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/css/ca091db432343524.css","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/css/ca091db432343524.css HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-1827\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BN%2FaA4qnvPJf4cMsalotpYavEQuitjdwx9cAf6Dne3kkyhlJcGgcA64EzS1elkZ3i%2BableTbR2UNPv9FL0rEjG3rv9FyxGeYgX%2FopxgLTYGfMH6uVyP8QA%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5060)","md5":"b7c8861d6ffeede8605c3e2e798a8953","sha1":"6aef66590704d99e0526d3998171dc4f6ae2b639","sha256":"63c155939d0e7e2367172ae4f2abbe606a8fb5e3287b166d0a88ab697e780988","sha512":"b1926d50f33d920cdd204cd44f6f4696ea10114927e4f79f7877480889ce3dbc03e70e3d3fa14cfefeb4e311110ee944bd85ab38a03d66ec35b3086a188f3d32","ssdeep":"192:n7gqzOi1+WT6RkwwDe/9ERSItcHJLVoWD:8k9SIM","tlshash":"7bd10021f657cebbedc4c8d6fb60351aa60a2194ae7915c2ff43270378db160059ed29","first_seen":"2026-01-22T00:09:05.836619Z","last_seen":"2026-02-20T08:01:05.524623Z","times_seen":796,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/app/layout-ae6e31d5be24263f.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-ae6e31d5be24263f.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-2931\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EldJ4vC2wdBRRRu3Hxcyt9guqQYhon345ZgpQfiPkmt2LpT8qBvL0jGKrhYbWED626JhjirLvli409ylfMxhr9W9pBAowIzLfhOwS8aFWn6do8jivDVuYw%3D%3D\"}]}\r\ncf-ray: 9c1ad192bda623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10483), with no line terminators","md5":"39238a6b3c789c6171ab070116c8450b","sha1":"1bdcdcc5d9cf1b0111e78c9d5803e4ed662b9337","sha256":"d11c31489ed4b66fd411cc22a28398959624b6212f162e0dab5d2b7983af2847","sha512":"54c1ee89430d8d5dbf2e6bcf5a4a10628cc5577e59401a84221e553e6265f801b55cd24683ffc65b2550223186546ba60dd9f1bc7fe94546b514bfc506c2cb48","ssdeep":"192:q3A4n+5cqTiQSTiYdx8xWYFQJ/JcxpfaigAypLqvEEn6gJJJjFf6:q3TMTipTiYdcVFSJcJd7K","tlshash":"7622e9d2f281fd78a53909c4d42b491c321a1f65962f8c60bab9fc9b2195dc8b1b1fcd","first_seen":"2026-01-22T00:09:05.849596Z","last_seen":"2026-01-22T00:09:15.889103Z","times_seen":2,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Jan 2026 00:55:05 GMT\r\nexpires: Sat, 16 Jan 2027 00:55:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 515620\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-13T08:19:00.013024Z","times_seen":32259,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":111,"dns":3,"connect":14,"send":0,"wait":16,"receive":14,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026tid=AW-17726698187\u0026en=page_view\u0026dl=https%3A%2F%2Fuser8171.trustpay.energy%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1637760216.1769040526\u0026dt=Trust%20%7C%20Your%20Private%20Crypto%20Card\u0026auid=2113488241.1769040526\u0026navt=n\u0026npa=1\u0026gtm=45be61k2za200xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616985~115938465~115938468~116185181~116185182~116988316~117041587~117099528~117171315\u0026tft=1769040526205\u0026tfd=1367\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:46.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:53 GMT","end":"Tue, 03 Mar 2026 17:10:52 GMT"},"fingerprint":{"sha1":"5D:5E:18:EB:C3:38:2D:9C:25:1D:F4:50:C9:3F:F8:EF:AE:5F:99:45","sha256":"15:C1:31:8A:76:28:CA:A6:2B:C5:FB:F3:7A:63:A5:AE:AF:D8:0A:D3:F9:E1:4A:3F:93:13:CA:87:88:4E:59:A5"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026tid=AW-17726698187\u0026en=page_view\u0026dl=https%3A%2F%2Fuser8171.trustpay.energy%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1637760216.1769040526\u0026dt=Trust%20%7C%20Your%20Private%20Crypto%20Card\u0026auid=2113488241.1769040526\u0026navt=n\u0026npa=1\u0026gtm=45be61k2za200xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391253~115616985~115938465~115938468~116185181~116185182~116988316~117041587~117099528~117171315\u0026tft=1769040526205\u0026tfd=1367\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user8171.trustpay.energy/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 22 Jan 2026 00:08:46 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T08:17:52.207669Z","times_seen":17208424,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/benefit4.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/benefit4.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:26 GMT\r\netag: W/\"16ba-19bc759c0f8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeO0Vf6zO1dl%2BLOhPyZH%2BsiyriCm1IWngd7K%2BSAFA8%2FhgsdfS0PLAuZ7zsTkIS5OGsozrZJOASSq8HDOn0RypsbCydjXLmVgNknZ4J07fRkwyODfdF%2BRyQ%3D%3D\"}]}\r\ncf-ray: 9c1ad1928d9323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1e6944c95750e2f20dd0902e8065b2c","sha1":"31540228a6b9ddc6cd4701720fb9b53210cb1e4f","sha256":"018c0cea41d585a7b4190176e7a18128a89e1aee685ab9e763741f376081b995","sha512":"e88c0f52743f841767e457a627248ddba418dab011ad59ef302b67a2da15908c8cc5045112348acd125fbbd83f236d4681fc64f54834d29ba6525718657d2699","ssdeep":"96:y2dqoNJZEMhiFeGnITA2dqoNorYvjfLVOgnXpv5pwYHBrhwYpWUoqZB2n+jOdFRf:hdqY38Z0dqJsj5v5iYZhv1Cr","tlshash":"3ac1c8d57734b9bcf0e70be9df10f9a4304e70761a559388c3a1ca3541969ce992bce0","first_seen":"2024-10-12T13:56:58.696978Z","last_seen":"2026-07-11T14:49:25.417099Z","times_seen":863,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 16 Jan 2026 00:55:05 GMT\r\nexpires: Sat, 16 Jan 2027 00:55:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 515620\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-13T08:19:00.013024Z","times_seen":32259,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":205,"dns":0,"connect":29,"send":0,"wait":17,"receive":4,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/webpack-7a469e3698d31c88.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/webpack-7a469e3698d31c88.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-e03\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fc9XbT2CKk7tOHZa4xtJ%2FphJT9uLXBkvX4O9kYLVKQuj06XzELQxnYIbiY2ETN8d5yL6wnKzIJVZrrUoo%2FVMXhMNptzoNHA%2BwOU4Scr00bB3kQrHyyz3qQ%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3587), with no line terminators","md5":"9f016d999ce949ce7301ad1d357c4110","sha1":"8728ddd1100a480f9251c3197df5bf6d13b27cf4","sha256":"6b7749c269aa52f352619f54be875e5fbbe4b9daa86cbf288b44e665927138b8","sha512":"3e6ab05fdcaf436b8df4fdb803870d0baa61ce4cb03ced51f820143c96318910f80277c34732562b546c2d5e8a2b8e3e0bfc877f01a67df011a143692cdf0853","ssdeep":"","tlshash":"aa71c4a53661eab656f104c6483ec152f629203b052ef8f0a70bdcba7824ad10522ff3","first_seen":"2026-01-22T00:09:05.827041Z","last_seen":"2026-02-20T08:01:05.515813Z","times_seen":784,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/favicon.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:46 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODRcMiM8qypB%2BA2kzsKEOP2n1ZM5fJ9ByaU%2FEbZcDjHnApe9o80MHbWizHf%2FkApOZ0M97FFv61EoB0uqYzW8YpIAroqJpTQ30Naqx%2F7iAoRDMVfI1dywNQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:05:29 GMT\r\netag: W/\"2fa-19bc7570e46\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ad1966dce23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/api/retrieve_config","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:46.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"POST /api/retrieve_config HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nContent-Type: application/json\r\nContent-Length: 165\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":165,"data":"{\"action\":\"retrieve_config\",\"domain\":\"user8171.trustpay.energy\",\"user_id\":\"5\",\"message_ts\":1769040526144,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OHbhIX0PnimWuSbeloqxQaQlOiL4yb9tXYDLOpJKKhsZ9yM0N0nboRLUMNfAQCAMFpG9IzfQUvDCfKenJo3em79GEanfRyaqKfYcGNlngPmELhSjM0eDw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"1f92-vx5nkfByUtfDht6wJdKJGK9EYPA\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ad1987df423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8082,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4e13061f00e88c393bed5c20ff90978a","sha1":"bf1e6791f07252d7c386deb025d28918af4460f0","sha256":"6d39433f4356fe74198d9f6fbffd14bb328fbc1fba1d839d4ab5d2fb7f84dc10","sha512":"cc686424b30d108240ba0668e834283002fec49c2a56e8262af1b6def2f6fcc4b1b8bac65e8a651205286276618af346fb086634c052e75f44f8bccb83ef5dac","ssdeep":"192:ILfDD2qIpqBq0c3jvi+7eLvw5vwhzvwfvwovwlvwKvwsvwUvwZvwCvw8wxvYB:tRpqBq0c3jvi+7eLvw5vwhzvwfvwovwu","tlshash":"50f1dc76beddd3a9c0deed707cab99e340d8b6ad4c5c83170399541988eacad2743807","first_seen":"2025-12-29T12:15:56.361386Z","last_seen":"2026-01-22T00:09:15.892313Z","times_seen":5,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17726698187","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=AW-17726698187 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user8171.trustpay.energy/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\nexpires: Thu, 22 Jan 2026 00:08:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130120\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381527,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"c2e882bae42f2b7cc3846735678f7f8d","sha1":"854e739fcc152fc3b93a9cd0adde35125c6c15d4","sha256":"382494873a026841786cbc54efb9b124a32c7cb11d99398a58cc4537ea6c0232","sha512":"ea7180b37bbe96b9848c58c439ca60f9b1fe061a4b6cdaa4474d226f16d0cdc2a7abf3d71cd59f84a38f4bbb1ac681b77e0ce226f566a935bb9af983cf44d90c","ssdeep":"6144:0zXo/RsWAhJZEXkEsrzRUKh7K0go3VLXgejIBDEmpx:y4/CWAhJZEXkEAJh7zIBHx","tlshash":"f28419cd73d6702693a2a478403f118ba57b69a2f44ccc95f18adce42e74a9a4137f7c","first_seen":"2026-01-22T00:09:15.893474Z","last_seen":"2026-01-22T00:09:15.893474Z","times_seen":1,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":125,"dns":0,"connect":20,"send":0,"wait":46,"receive":58,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/benefit3.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/benefit3.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:05:28 GMT\r\netag: W/\"1225-19bc757081e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DeOY7cEV2oKdpWBDH1LXaSfvitTRDHHGv6kHT79fOb2JUemcQ%2FcsbpOzp7TAYgksP59S%2B6Ve6Y2Zw%2BaXdh3bnqZPVb2JTEII%2F0xUunKjUwIfh1JWl8%2FQKw%3D%3D\"}]}\r\ncf-ray: 9c1ad1928d9223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c210d79d224dc0acca1c3beeb029195b","sha1":"75894cf8e5d238f788bd1d0fb258dac88c5b0126","sha256":"d1207a3591df9b2c69e8f08c29200283571c5744774d8e008aa3835957652a58","sha512":"d82594ace6a3cc531d7430a0d55cde548f4273f2ff170b51a93fa1c980baf3cce40bac295cdbfa444827666d7f8276860b854eaa4dd91bcbab07b277be2af6bd","ssdeep":"48:HRryHV/3wZy0xVsTtmv4jb3bU9UN6Zjamv4jbo6H9kMndH9XHO8laGH9XHO8eH9T:HdOAZrVsTsv2brHM1jv2bx1PL09EXud","tlshash":"86a176eafb2c9cbfe82787bccb48e1f5504d61d664c08368c2799f1e51046cb591aec0","first_seen":"2024-12-07T17:47:59.744392Z","last_seen":"2026-07-11T14:49:25.436082Z","times_seen":900,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-2a3e0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V51Y8TjRm4eLPkgWLKDl205Kb%2FNO1W8gm0J7tOSQ8Dr84U9Jqirxjdfx9ObYwnOFEOU6CVUR8hs9953nes9nOfac7HNXaRXLk%2BZCCgqjD4PzyjM66c1L9w%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-07-13T04:45:57.797852Z","times_seen":971,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/550ed063-ff1761c4cedc8066.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/550ed063-ff1761c4cedc8066.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-a9b0d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKf%2FefrrLSAZK1ED9Fg0LcOo16K6Va6HinOn2JaxYN4ONajxTVvwHAAo6S%2FOAcRkD3NuCzc%2Bmq%2FwrChwJFOjxUUw%2BHlVZb9R%2B7AJauyghlhUT59SnPZkgA%3D%3D\"}]}\r\ncf-ray: 9c1ad192ada023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5c1958d1d1195c9e9296105afdc53e6","sha1":"af46fee94eead3413d3476ba5036b216f9993b1f","sha256":"7ee3b6f971cb89833d9f4f0c060609a1246d76c5ee049b865d63a68598156045","sha512":"5d024578f35f5e4710c11fd433bd922dc21e5ee5ee13192306a2ee6f9a73e4978515703927c3c595f7f7bf21b57a832733a63ead77c7ea15e8f28d30e7666a68","ssdeep":"6144:MXV2vCR1SHxEa01btnRmw+0briJ5gLOlIvMlYG2:g2bT0iJGkw","tlshash":"a3e4d54876c7f566468160f0163b640eb23e6b48d05c9645f368e4e37ef8eda832bb74","first_seen":"2025-12-29T12:15:56.38318Z","last_seen":"2026-02-20T08:01:05.521062Z","times_seen":807,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/cta-banner.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/cta-banner.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:26 GMT\r\netag: W/\"280a-19bc759bfec\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3o4jHK51qlgNgJgaci6u0UNZWlSlY1yLjBCDg1QyF7GfMsUUld%2FkV7lYKieKxVH2fXwucbZNQcs55EwSpjIqUbgDqm7H6WfPoIdPADrkOdzdHnzOsdzKQ%3D%3D\"}]}\r\ncf-ray: 9c1ad192cda823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94df810c2ed1a1fbb3d89f767b243411","sha1":"fa0595f7d03ef2eb83c6ea2beadd23dce3e6579a","sha256":"1a07b51df7cce62e8d728ca85759d6a735fff8f54144660fc2b7206b9cf194a2","sha512":"231fb23bbe4cd8a1754f265ff7a4af7444cba4c6a3680fdeb7f49520a3822ca8e779e155373305aa192b35fac82a2c08930d1d4396dda2865cb5b191b686644e","ssdeep":"192:KAcdLt0TAR3pxOVpjWjZiO4NgCAtZ6wzvRx:3cdJ0UR3TgjWjZizqZV","tlshash":"8a220dce3b145dbcf93287a6db02b3b9202b49b707e56310ce361a79640195ea93fdc4","first_seen":"2023-12-01T17:00:55Z","last_seen":"2026-07-10T08:17:19.819383Z","times_seen":1031,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/favicon.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/favicon.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbeTWeYnQzFDyDke41%2FVxTGs5PDd77iKsjCWSbp9OIgehCZmDJz825dHMDfxs75o0ullbY2PaClW2M9LyPfJPeciIo6lhER%2FvrEICKS%2B%2B8Lu0%2BxbfgpdmQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:27 GMT\r\netag: W/\"2fa-19bc759c4f0\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ad1965dcd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"217d2822f9a78a31c9653088f377f1c6","sha1":"2e7f1c76691b9fff0193a66385fdf69204eb172a","sha256":"909a0efb318dda5bfaaf0680ad61905f3bbfedb0af70af84989937972a847c47","sha512":"50d683b7c4c69ed7ee2e41572537adc11040d1e18dc5e5b187d245ebd0a610f89c795baa30b2aaf8a0930f8411d20523fcf4520eef997eab853b67a6e4517f20","ssdeep":"","tlshash":"66016d2bea2dea6be998c21ce008c1f1306940c2e981c261e294ef0f19044822e4fbc2","first_seen":"2026-01-10T14:02:29.6582Z","last_seen":"2026-05-30T02:24:41.83447Z","times_seen":810,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user3857.trustpay.energy/wc-bridge","fqdn":"user3857.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:46.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /wc-bridge HTTP/1.1\r\nHost: user3857.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wb0StktiVTHxnFvzRCX3%2FGILAP65sqgBYAJC%2FZpAUl5q8WgNm%2FRU1Kiw56bOhqI9LDaOkKQKwmb69ceqCAICh6p2ykUHwhSz83AcoB1PSaFgs1gpu4Y3pw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors https://trustpay.energy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c1ad1989df623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T08:17:52.207669Z","times_seen":17208424,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user3857.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/flags/us.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /flags/us.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DenE278FZ3zeJ9IgzwyrhwjET2gAQUoPYs%2FJ9%2BOqxuhK5vbI3vr3TfgnEARJ%2FJ2HPqw7poy5Li%2B%2FPuibAqDjd9zvAB6g99tw5CTi77gmMBlI12wgDFtIaQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:05:30 GMT\r\netag: W/\"288-19bc7570f5a\"\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ad1928d8d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-07-13T08:02:39.907134Z","times_seen":4057,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/icons/benefit1.svg","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /icons/benefit1.svg HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 16 Jan 2026 15:08:26 GMT\r\netag: W/\"56ff-19bc759c180\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MRY6HNaUNgDxsyBpKoeiOO%2FNXKthuSbm%2Bw9jVJKWkKym6dqTVz035Xz1F3GvNKw%2BSEustfK%2B1rkhhkxEbwx3OE%2FnDHBPxNYtckEdyAzJMwh2rlRaBG3V6g%3D%3D\"}]}\r\ncf-ray: 9c1ad1928d9023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1645fe9e4e50c926db510f45d2670378","sha1":"325294dfe8267c63104646d60cdce3e201f6d7a0","sha256":"89f90f697ecb81bc6558e7a4df1abee65c3e45238e818631b14960c55e6b5ab9","sha512":"c569f384e77c296765cd60c630d8ac05d09e006b057e01f1a6940359d9b76cb3c62f613996be763b7fbd365c9496253ac985d1c2777e5977bbacb7e1775ff9f3","ssdeep":"384:jz7cy1KpXqwovhEqTjOyf731s1uhjNo8JNoXuhGYZe9YZ6iSqHmC/k6O+VgaCqG:jz8AVTjOyB3teC/kZ+yH","tlshash":"32a2b7ca6b385dbcf1c74fbadf2479e8200960ba0e2917d4813ea07d1657dcdd61ac94","first_seen":"2023-12-20T05:41:29Z","last_seen":"2026-07-11T14:49:25.416585Z","times_seen":875,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/css/6e48048022a69e58.css","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/css/6e48048022a69e58.css HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-510d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ElVXTp7xs%2BqQhVmC9gEc%2Fi0F7Ju6MtsW9TK9HMUWKnsQVQCyppSbrPnBV5FVjScKpkmsMgath36r60DqmxZyvdX7B9bfDo5XqzqLrlLG8IM%2F5C2AEBRy9A%3D%3D\"}]}\r\ncf-ray: 9c1ad1929d9b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20749), with no line terminators","md5":"456bb6b0b391ddb448da0fd85f056e07","sha1":"fea7a171b6a892b3b88e4eb5f6e4d0cca980dd2b","sha256":"b82b060e7aad9907b587be5ba86cc635c2b3091363a832f28a12a99b6882401f","sha512":"457e5d5e9fa811a2461244a88f56a01817363dfb250430b717f79c8c91cc9a8c8f91875d58439bca5329066ddc743b74ee63f182757262e3c26fa326e979b878","ssdeep":"192:BwEVP358B9ogLzmh2QaCUjQquMkZ7xrdWMxc7bTgowKpXXXWNMQylG0PlwRR3cQz:Bwg35ZgsHk+dVB1RMedkm","tlshash":"9f92752339001125f12feca4b9d2af99b160f811d29b96fae545b939cacf0970772b0d","first_seen":"2026-01-10T14:02:29.664502Z","last_seen":"2026-02-20T08:01:05.534948Z","times_seen":797,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/255-dc5f45a243dc3a80.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/255-dc5f45a243dc3a80.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-2a312\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swx0UtGJQqTFpkHdfxaYZKmiOSsI%2BAq4q67NiIBL5VEQXZ%2F8%2BqFyGNik7iJNMpDBW%2BXjsl8zmUP6wylbgTi8MdqankxQDobvIJGsJiLxQIZIi0o%2F%2FQhT%2Bw%3D%3D\"}]}\r\ncf-ray: 9c1ad192ad9e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172818,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f30fabcea97e444991d6d6208ba42581","sha1":"ee6f0d44cceee3473da95b4cd1daea35ed21e427","sha256":"0ce304948789a2e44b3b9f3493ea62a36ffb4bec8cc6dcd6086a45f51587e5d8","sha512":"1ef36632bb55d1dc6a2a7ae96fdf14d419b65467631b29e6e64a9f8259116b766bcdcff6722eace8a6e270fb1b00aa3b39754e0018d270cc6c4c6656027441f1","ssdeep":"1536:EzigN+8/BhcO5HYHqLVcXr7yIzPr6Q04ToTlTx1p7eChTVOocZXxreXRNIrjg/Sz:e79LmA+Hy4r904Aj44RN0E/Sz","tlshash":"61f3dab636d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975645dea1b3faa","first_seen":"2025-12-29T12:15:56.386555Z","last_seen":"2026-07-03T22:16:30.423451Z","times_seen":118,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/342-63e6943cc35b3672.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/342-63e6943cc35b3672.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-ec35a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnRSfMv99zZSdOslO8FQkLgn1E1iEhOdzGEXl5KOec6KYZ%2F3s6BG85u3zMHe%2FJKVSwiukv2PIauwi%2BS92%2Ff6HgbfsqI7AAmzwWa0%2BeWguLZ%2F5ADjE7bcBw%3D%3D\"}]}\r\ncf-ray: 9c1ad192ada323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4c4915ea72ad2a7777bdaa63054d8d8","sha1":"ddd352b1b226037b6d850622453b0945ade8c067","sha256":"6401fa77d7ceb2f356051077a51205828a6bb2feb114b31c8e475e7aae355a25","sha512":"a40de6ba94d4a8a2bcf1f5982fc7fae3b5dd6bae13523ccf11cab5798192a4cfc1f21560ae06f0db6e7091b08994da062186800e249ebc7b80dce0e873aab4d4","ssdeep":"6144:ICAfz8whktfPHRAjUyn17+SKQw0ymqweS8nytxUdqUcS8UaVnBCVMJFYC2C9i0y7:cfpkCn5KQwZyty3VZCRJjVsB","tlshash":"25253a997752f061879a51e554bb1007f338be5d904d402cf6a4c8ef7aace88a2b7f34","first_seen":"2026-01-22T00:09:05.834486Z","last_seen":"2026-01-27T13:26:58.87567Z","times_seen":9,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/276-a730a321888fb016.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/276-a730a321888fb016.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:07:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a544f-1a323\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EU0l6AbL99m9%2BGMnFjFZ2E36hn7lpBsOqQmYttsPXMJpRdORhSbZKXyoZ3n1qHY5iA6VOr8mrf%2BxdGXovddbZ4GGLPMOovvHHgxDaEZDhqu8jDoJfQW9Yw%3D%3D\"}]}\r\ncf-ray: 9c1ad192bda523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63951), with no line terminators","md5":"7ba50df6ffd6e5187ae0d6ef2d6896b6","sha1":"04a9b442899d3e1a0c95eab04766c560043f76b5","sha256":"edb45a1370a930c9130c8f45928a009c6b836df4f89f1305953f8b882dceb5c6","sha512":"14e2ec12444e9a7c713a3fd0e64aba01a973f5591673f9baac2c306118f4acefd9cc5ecc8518dd9f520d0220499cb983b84163413d1f982c498ce1cdc5128b75","ssdeep":"1536:00eZ8HFH1pYWmyPvrb8ZdNE/kdJBhKcS+a2u3bfobiRKahY/8W0LgRBDxD89x0ux:00zFDP30zLfGWfD3u8JO","tlshash":"1fa33ab0277bb93c619a104d591a3208b1be9f98d80d4875b6bd2c3b565ccc0eae3fd5","first_seen":"2026-01-22T00:09:05.842976Z","last_seen":"2026-01-22T00:09:15.902023Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/api/retrieve_id","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"POST /api/retrieve_id HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nContent-Type: application/json\r\nContent-Length: 162\r\nOrigin: https://user8171.trustpay.energy\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":162,"data":"{\"action\":\"retrieve_id\",\"domain\":\"user8171.trustpay.energy\",\"user_id\":null,\"message_ts\":1769040525975,\"chat_data\":0,\"wallet_address\":null,\"partner_address\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEjLckGatUkXIAP4EytFLk7ZhIF%2F3M1GdKIINLZJfQgvsoQf5KteD9K4dUmN4DIGV9j1uf2NeXD8iDRfWCm%2Fm5%2FWDlFR3Rx5l%2FUTaYoDjwAZil9dSGracA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 30;w=60\r\nratelimit-limit: 30\r\nratelimit-remaining: 29\r\nratelimit-reset: 60\r\netag: W/\"18-aqka6m1PIhhggnuxGuUX94+cuBM\"\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c1ad1976ddb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2fc2768b4719951b21d8d42adf80cc78","sha1":"6aa91aea6d4f221860827bb11ae517f78f9cb813","sha256":"b8b3ea982656c6fc875934a15e0aec730a1a1f3b876f0dcb099559b582e1311e","sha512":"1e4ac4d4f9740bfb39aa8c1b0a3c06ebca7cd284982455cf88ce45b8007ef330c50c2c51c8e2352e9ad73bf9fc90380f550877b1606fa64f15f8d6168baf4f2c","ssdeep":"","tlshash":"ad700000280280220c88088000008020abb03a80002e0080008ea82088802a0a88b820","first_seen":"2025-11-29T10:39:40.314123Z","last_seen":"2026-02-19T00:53:21.376666Z","times_seen":28,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user8171.trustpay.energy/_next/static/chunks/159-f9058d3a7fc08582.js","fqdn":"user8171.trustpay.energy","domain":"trustpay.energy","tld":"energy"},"ip":{"addr":"104.21.47.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user8171.trustpay.energy/","date":"2026-01-22T00:08:45.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustpay.energy","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 11:23:39 GMT","end":"Sun, 22 Mar 2026 12:22:25 GMT"},"fingerprint":{"sha1":"20:D8:FA:6F:1D:84:D7:20:76:47:FB:9F:C1:E9:AD:C3:B0:07:8D:4B","sha256":"99:E8:4F:9F:AD:25:1B:ED:EE:5D:EB:A7:23:22:C4:EF:08:7B:E5:4E:EC:05:C1:6E:19:E2:95:E5:FB:1B:DF:9B"}}},"request":{"raw":"GET /_next/static/chunks/159-f9058d3a7fc08582.js HTTP/1.1\r\nHost: user8171.trustpay.energy\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://user8171.trustpay.energy/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 22 Jan 2026 00:08:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 16 Jan 2026 15:10:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 22 Jan 2027 00:08:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"696a54cb-2914a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2F%2FPZFGb1i12IX%2BQScvgFQZi6eqZDWBp9YyeMUEOZWqUZWMNpWzzSNVvN0bQsIWs%2FqniQ%2BZTI2bFWSaxF18sw3olCmwGwAvek0X5rx%2BmTwdugZYn2kGczw%3D%3D\"}]}\r\ncf-ray: 9c1ad192bda423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55784), with no line terminators","md5":"62004ac45e5a2c332ae13e58ad7c0699","sha1":"13b4a47ec9c306ed763bc6783a1ad960f596017d","sha256":"ce51b31efa7f2e566901281a698a3878d21e201f0c04d8ca4d0232015c9325e8","sha512":"a60ad5297e607733efd0adbb60ce32cfb03d9afec3f219a616e2d3337a5217d1c5342960224cc0d6cc836f7c5771f44f21e91427f5d8d820f98f196cb7ffdecf","ssdeep":"3072:oGhdXNIB3UBxVLGk9M5HQXymCHFpi7dDLup7xg1QNO5W3W:rTNIB3UBxVqkO5HQX8Fpi7dY7xg1AG","tlshash":"1a14c70296a967b443ae17a378046ba61c70c9e9d7cc41bb0b9dc3bd14ddfe8d037296","first_seen":"2026-01-22T00:09:15.903399Z","last_seen":"2026-01-26T00:46:39.645823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-22","alert":"Sinkholed","trigger":"user8171.trustpay.energy","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}