{"report_id":"0cbe8a2b-d3ef-4879-92bc-56a619e13bc1","version":0,"status":"done","tags":[],"date":"2026-06-22T12:54:55Z","url":{"schema":"http","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"75.2.97.28","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"title":"USDT Payment API | TRX Collection | On-Chain | Pay.bi","dom":{"size":84179,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7017)","md5":"0a78e5023bf206049a1acd570a15cbeb","sha1":"0b948e39cce10dd2a3d13a01f1f704c29bc1303d","sha256":"f7e9fba4a1c74dec3d25f2a8dbe0ad8683ab918a57706e7dc8209ad5e44d8a91","sha512":"58c2a69bb03ed8c390bee0af95d720ac4d9bcb14ae37b90846a0deac7be01be33d6528c932ddb33d7f4b063e6c1a7799bb60fa7b534b88dc2e9c3ae3565c19e8","ssdeep":"1536:LpHt3TGLeMo9qQRpimJ7DIHnqVzoLj8W7ITT5UxtCmnuAeetOzbVj3sbBfIYO9iw:Lw/MQRU","tlshash":"6183c77751a31561b417e1bea7f76b0a2274b003f505d8687fac72884fce8889a537bc","dom_hash":"domhash20eac1c4b56660d6e4d9330c7c12bec7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"75.2.97.28","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T12:54:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":6,"received_data":222606,"sent_data":3354,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pay.bi","ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-06-22","domain_rank":0,"first_seen":"2021-03-20T05:11:26Z","last_seen":"2024-02-08T04:03:59Z","alert_count":0,"request_count":3,"received_data":80934,"sent_data":1389,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":12013,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c28d26bb2242c28edd6d319a22e18111","sha1":"3378f239f3ca3ec74bdbb21b820da417e62b4b9b","sha256":"4768d5f3d20e9b187aaffb37d1c7342264688decd867dfecfa9a6e8ad290ec45","sha512":"a44c1cb15a27e6bc6dea4aec696763eb95fd2764ec89d763df8cc8075825b32cd45d10c910d4a2b219678e5afd9a7fd2bb89823a9157068cf99dcd144ef93a53","ssdeep":"","tlshash":"c1d0a77162e31431018712328e9d5f40147c9913f8475d26b52e07449f53d1021859e4","size":236,"data":"","first_seen":"2026-06-22T12:55:00.180775Z","last_seen":"2026-06-22T12:55:00.180775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f4db223ea349f86aa3eb5b9ce383fb","sha1":"9adec2ea4a1fbc24f3ea2f41ca929dcb774e08a6","sha256":"f654d99a1a93a439d97816c6b95ba0cbc59ce3c3c2a4b58604629f790ea0037a","sha512":"8b58ab7519dda60fb55cf0a0183dfcc1316823963a67f8aeacaf10c49e803cf7477233e6f91f781fc3cb6f65e56be891d6d1a68d904849b50efe3f1e67e712aa","ssdeep":"","tlshash":"0c81425b707704354babb16987d7134c7530e14b34c5cd0e3f2c82884f92e5aa9a3bda","size":3860,"data":"","first_seen":"2026-06-22T12:55:00.182038Z","last_seen":"2026-06-22T12:55:00.182038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e24870b7c2e83319c5117949a1975fd","sha1":"a588caff977a10e7f514b0e3598dfa5099a40c32","sha256":"0f09cd19b89e6a6d800c573641a68ba87a77ea2ace74a97d10492132488d3bf4","sha512":"abd43096005cbd15b89a400f72e09b9d2935e656a6b17971e874df2e25f97d8d403d530b249a9f2cd862fffbe50b716c0fb2a75dfbc68f9a190f918fe033526c","ssdeep":"","tlshash":"1a31ec5f32f714b8c6a766a623bf47a47121a0433c45c9553a5dca880f81856a973fc8","size":1829,"data":"","first_seen":"2026-06-22T12:55:00.183187Z","last_seen":"2026-06-22T12:55:00.183187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4266a1070767a4dda4c4ebd02bc37250","sha1":"b7445186629a9e6e009f84603a0728690f42c719","sha256":"bc234bad5a793197a67e6c3347c783bdad5687c8bacc78d9dda31e6e8d0c791e","sha512":"4dec2be87119dc502869e8de02be6de5fa3d8eca751b08af70745a8771f237a57801370dc5c3f879efae337b574dce017e4ae5baa78bb02d49729f7d41e2e3a1","ssdeep":"384:ulNCXc95noVaa9CqKALhcTLRxLNppxrorWzpDgZ:lXc9mRkry","tlshash":"2292b476a0621e6079a7f1bee7d72249261830077940f4d57e6ef2810fee5088277ef9","size":19827,"data":"","first_seen":"2026-06-22T12:55:00.184459Z","last_seen":"2026-06-22T12:55:00.184459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c28d26bb2242c28edd6d319a22e18111","sha1":"3378f239f3ca3ec74bdbb21b820da417e62b4b9b","sha256":"4768d5f3d20e9b187aaffb37d1c7342264688decd867dfecfa9a6e8ad290ec45","sha512":"a44c1cb15a27e6bc6dea4aec696763eb95fd2764ec89d763df8cc8075825b32cd45d10c910d4a2b219678e5afd9a7fd2bb89823a9157068cf99dcd144ef93a53","ssdeep":"","tlshash":"c1d0a77162e31431018712328e9d5f40147c9913f8475d26b52e07449f53d1021859e4","size":236,"data":"","first_seen":"2026-06-22T12:55:00.180775Z","last_seen":"2026-06-22T12:55:00.180775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f4db223ea349f86aa3eb5b9ce383fb","sha1":"9adec2ea4a1fbc24f3ea2f41ca929dcb774e08a6","sha256":"f654d99a1a93a439d97816c6b95ba0cbc59ce3c3c2a4b58604629f790ea0037a","sha512":"8b58ab7519dda60fb55cf0a0183dfcc1316823963a67f8aeacaf10c49e803cf7477233e6f91f781fc3cb6f65e56be891d6d1a68d904849b50efe3f1e67e712aa","ssdeep":"","tlshash":"0c81425b707704354babb16987d7134c7530e14b34c5cd0e3f2c82884f92e5aa9a3bda","size":3860,"data":"","first_seen":"2026-06-22T12:55:00.182038Z","last_seen":"2026-06-22T12:55:00.182038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e24870b7c2e83319c5117949a1975fd","sha1":"a588caff977a10e7f514b0e3598dfa5099a40c32","sha256":"0f09cd19b89e6a6d800c573641a68ba87a77ea2ace74a97d10492132488d3bf4","sha512":"abd43096005cbd15b89a400f72e09b9d2935e656a6b17971e874df2e25f97d8d403d530b249a9f2cd862fffbe50b716c0fb2a75dfbc68f9a190f918fe033526c","ssdeep":"","tlshash":"1a31ec5f32f714b8c6a766a623bf47a47121a0433c45c9553a5dca880f81856a973fc8","size":1829,"data":"","first_seen":"2026-06-22T12:55:00.183187Z","last_seen":"2026-06-22T12:55:00.183187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4266a1070767a4dda4c4ebd02bc37250","sha1":"b7445186629a9e6e009f84603a0728690f42c719","sha256":"bc234bad5a793197a67e6c3347c783bdad5687c8bacc78d9dda31e6e8d0c791e","sha512":"4dec2be87119dc502869e8de02be6de5fa3d8eca751b08af70745a8771f237a57801370dc5c3f879efae337b574dce017e4ae5baa78bb02d49729f7d41e2e3a1","ssdeep":"384:ulNCXc95noVaa9CqKALhcTLRxLNppxrorWzpDgZ:lXc9mRkry","tlshash":"2292b476a0621e6079a7f1bee7d72249261830077940f4d57e6ef2810fee5088277ef9","size":19827,"data":"","first_seen":"2026-06-22T12:55:00.184459Z","last_seen":"2026-06-22T12:55:00.184459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c28d26bb2242c28edd6d319a22e18111","sha1":"3378f239f3ca3ec74bdbb21b820da417e62b4b9b","sha256":"4768d5f3d20e9b187aaffb37d1c7342264688decd867dfecfa9a6e8ad290ec45","sha512":"a44c1cb15a27e6bc6dea4aec696763eb95fd2764ec89d763df8cc8075825b32cd45d10c910d4a2b219678e5afd9a7fd2bb89823a9157068cf99dcd144ef93a53","ssdeep":"","tlshash":"c1d0a77162e31431018712328e9d5f40147c9913f8475d26b52e07449f53d1021859e4","size":236,"data":"","first_seen":"2026-06-22T12:55:00.180775Z","last_seen":"2026-06-22T12:55:00.180775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f4db223ea349f86aa3eb5b9ce383fb","sha1":"9adec2ea4a1fbc24f3ea2f41ca929dcb774e08a6","sha256":"f654d99a1a93a439d97816c6b95ba0cbc59ce3c3c2a4b58604629f790ea0037a","sha512":"8b58ab7519dda60fb55cf0a0183dfcc1316823963a67f8aeacaf10c49e803cf7477233e6f91f781fc3cb6f65e56be891d6d1a68d904849b50efe3f1e67e712aa","ssdeep":"","tlshash":"0c81425b707704354babb16987d7134c7530e14b34c5cd0e3f2c82884f92e5aa9a3bda","size":3860,"data":"","first_seen":"2026-06-22T12:55:00.182038Z","last_seen":"2026-06-22T12:55:00.182038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e24870b7c2e83319c5117949a1975fd","sha1":"a588caff977a10e7f514b0e3598dfa5099a40c32","sha256":"0f09cd19b89e6a6d800c573641a68ba87a77ea2ace74a97d10492132488d3bf4","sha512":"abd43096005cbd15b89a400f72e09b9d2935e656a6b17971e874df2e25f97d8d403d530b249a9f2cd862fffbe50b716c0fb2a75dfbc68f9a190f918fe033526c","ssdeep":"","tlshash":"1a31ec5f32f714b8c6a766a623bf47a47121a0433c45c9553a5dca880f81856a973fc8","size":1829,"data":"","first_seen":"2026-06-22T12:55:00.183187Z","last_seen":"2026-06-22T12:55:00.183187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4266a1070767a4dda4c4ebd02bc37250","sha1":"b7445186629a9e6e009f84603a0728690f42c719","sha256":"bc234bad5a793197a67e6c3347c783bdad5687c8bacc78d9dda31e6e8d0c791e","sha512":"4dec2be87119dc502869e8de02be6de5fa3d8eca751b08af70745a8771f237a57801370dc5c3f879efae337b574dce017e4ae5baa78bb02d49729f7d41e2e3a1","ssdeep":"384:ulNCXc95noVaa9CqKALhcTLRxLNppxrorWzpDgZ:lXc9mRkry","tlshash":"2292b476a0621e6079a7f1bee7d72249261830077940f4d57e6ef2810fee5088277ef9","size":19827,"data":"","first_seen":"2026-06-22T12:55:00.184459Z","last_seen":"2026-06-22T12:55:00.184459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c28d26bb2242c28edd6d319a22e18111","sha1":"3378f239f3ca3ec74bdbb21b820da417e62b4b9b","sha256":"4768d5f3d20e9b187aaffb37d1c7342264688decd867dfecfa9a6e8ad290ec45","sha512":"a44c1cb15a27e6bc6dea4aec696763eb95fd2764ec89d763df8cc8075825b32cd45d10c910d4a2b219678e5afd9a7fd2bb89823a9157068cf99dcd144ef93a53","ssdeep":"","tlshash":"c1d0a77162e31431018712328e9d5f40147c9913f8475d26b52e07449f53d1021859e4","size":236,"data":"","first_seen":"2026-06-22T12:55:00.180775Z","last_seen":"2026-06-22T12:55:00.180775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f4db223ea349f86aa3eb5b9ce383fb","sha1":"9adec2ea4a1fbc24f3ea2f41ca929dcb774e08a6","sha256":"f654d99a1a93a439d97816c6b95ba0cbc59ce3c3c2a4b58604629f790ea0037a","sha512":"8b58ab7519dda60fb55cf0a0183dfcc1316823963a67f8aeacaf10c49e803cf7477233e6f91f781fc3cb6f65e56be891d6d1a68d904849b50efe3f1e67e712aa","ssdeep":"","tlshash":"0c81425b707704354babb16987d7134c7530e14b34c5cd0e3f2c82884f92e5aa9a3bda","size":3860,"data":"","first_seen":"2026-06-22T12:55:00.182038Z","last_seen":"2026-06-22T12:55:00.182038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e24870b7c2e83319c5117949a1975fd","sha1":"a588caff977a10e7f514b0e3598dfa5099a40c32","sha256":"0f09cd19b89e6a6d800c573641a68ba87a77ea2ace74a97d10492132488d3bf4","sha512":"abd43096005cbd15b89a400f72e09b9d2935e656a6b17971e874df2e25f97d8d403d530b249a9f2cd862fffbe50b716c0fb2a75dfbc68f9a190f918fe033526c","ssdeep":"","tlshash":"1a31ec5f32f714b8c6a766a623bf47a47121a0433c45c9553a5dca880f81856a973fc8","size":1829,"data":"","first_seen":"2026-06-22T12:55:00.183187Z","last_seen":"2026-06-22T12:55:00.183187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4266a1070767a4dda4c4ebd02bc37250","sha1":"b7445186629a9e6e009f84603a0728690f42c719","sha256":"bc234bad5a793197a67e6c3347c783bdad5687c8bacc78d9dda31e6e8d0c791e","sha512":"4dec2be87119dc502869e8de02be6de5fa3d8eca751b08af70745a8771f237a57801370dc5c3f879efae337b574dce017e4ae5baa78bb02d49729f7d41e2e3a1","ssdeep":"384:ulNCXc95noVaa9CqKALhcTLRxLNppxrorWzpDgZ:lXc9mRkry","tlshash":"2292b476a0621e6079a7f1bee7d72249261830077940f4d57e6ef2810fee5088277ef9","size":19827,"data":"","first_seen":"2026-06-22T12:55:00.184459Z","last_seen":"2026-06-22T12:55:00.184459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.066Z","timestamp":1782132873066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pay.bi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385600\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-25T16:19:49.474868Z","times_seen":218805,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":30,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.070Z","timestamp":1782132873070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pay.bi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385600\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-25T16:19:49.474868Z","times_seen":218805,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":23,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/api/v1/site-config","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.073Z","timestamp":1782132873073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay.bi","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:22:24 GMT","end":"Tue, 04 Aug 2026 08:22:23 GMT"},"fingerprint":{"sha1":"CA:92:C1:69:D9:5E:A9:8E:DD:1E:84:C5:6A:05:AD:D3:EA:92:52:80","sha256":"CB:AD:A8:C6:C9:CE:FA:8F:55:4C:13:BF:DC:D7:CE:88:71:B7:D0:E5:6F:10:DA:13:26:F0:F9:E7:EF:FD:43:18"}}},"request":{"raw":"GET /api/v1/site-config HTTP/1.1\r\nHost: pay.bi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pay.bi/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, Authorization, X-API-Key, X-Timestamp, X-Sign\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 22 Jun 2026 12:54:33 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 39\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39,"size_decoded":606,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6e00fb418cd41f980c0f1396b7b6b53","sha1":"045292173c77210b33bf52f39397d0174cc97973","sha256":"bb34e2eb72b3511aa8b9a7fc19af4c126a518cd0ecb7a85322767aa631367495","sha512":"cb0c4b2940a9a21c38c826e0faa5c489bea53cf770c031cf672def4de99f424752c5e104460381a46021cdbe243f3a38bc6913cc0783f6068436ffb4a892c752","ssdeep":"","tlshash":"b190041515340c4c4701c045014d0115d1545111cc4144044f4d7530c10401c1100d71","first_seen":"2026-06-22T12:55:00.175736Z","last_seen":"2026-06-22T12:55:00.175736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.228Z","timestamp":1782132873228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pay.bi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Jun 2026 18:44:45 GMT\r\nexpires: Sat, 19 Jun 2027 18:44:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238188\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-06-25T13:28:46.942978Z","times_seen":5307,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.236Z","timestamp":1782132873236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pay.bi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385600\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-25T16:19:49.474868Z","times_seen":218805,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/favicon.ico","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.374Z","timestamp":1782132873374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay.bi","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:22:24 GMT","end":"Tue, 04 Aug 2026 08:22:23 GMT"},"fingerprint":{"sha1":"CA:92:C1:69:D9:5E:A9:8E:DD:1E:84:C5:6A:05:AD:D3:EA:92:52:80","sha256":"CB:AD:A8:C6:C9:CE:FA:8F:55:4C:13:BF:DC:D7:CE:88:71:B7:D0:E5:6F:10:DA:13:26:F0:F9:E7:EF:FD:43:18"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pay.bi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pay.bi/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-headers: Content-Type, Authorization, X-API-Key, X-Timestamp, X-Sign\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-type: text/plain\r\ndate: Mon, 22 Jun 2026 12:54:33 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 18\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":564,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"53af239ee5d3e261545dededcb6ffd57","sha1":"04ca7e137e1e9feead96a7df45bb67d5ab3de190","sha256":"99eb12f2ab3c4866a353e098ffa3cb7a967e617c49b98480394ec5d8ea92b094","sha512":"c734e4a5ff5d335a91518dbf47861bdaf8012af49371dcd2e3350e269c9a5a1cc094114d17c4f5b053f3757b4b07487ebd0d309c91ef97acf4665cc5d5c9a2d3","ssdeep":"","tlshash":"ec70000c080202082020002822800020080802002a802220000aa00882000000800888","first_seen":"2023-04-05T07:16:36Z","last_seen":"2026-06-25T11:43:58.354079Z","times_seen":4070,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay.bi/","fqdn":"pay.bi","domain":"pay.bi","tld":"bi"},"ip":{"addr":"35.71.138.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T12:54:31.344Z","timestamp":1782132871344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay.bi","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 08:22:24 GMT","end":"Tue, 04 Aug 2026 08:22:23 GMT"},"fingerprint":{"sha1":"CA:92:C1:69:D9:5E:A9:8E:DD:1E:84:C5:6A:05:AD:D3:EA:92:52:80","sha256":"CB:AD:A8:C6:C9:CE:FA:8F:55:4C:13:BF:DC:D7:CE:88:71:B7:D0:E5:6F:10:DA:13:26:F0:F9:E7:EF:FD:43:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pay.bi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type, Authorization, X-API-Key, X-Timestamp, X-Sign\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 22 Jun 2026 12:54:32 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: waf.bi\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79200,"size_decoded":17843,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (385), with CRLF line terminators","md5":"949e8c8e00e70d7a1a10f410ecc57098","sha1":"5dfa72a2d4d8e9a3eac4a0b88d870e72d46adf31","sha256":"cac2ae27560ebd628642b01fdcf8c6615bf3adeb0a93b0f1bc70598661180664","sha512":"5891bdef72ec55a956aa3b2e7b585b81263045dea551cf3524668d4086d4d3f658d2833c00f289c13eb03a3fa99889674f03ee9b9532b936215469e0aaece179","ssdeep":"384:qDGMuz336Q4pIACHB5AuPAxIsDwn8s5rFlDcI06j0L6DDZvkpgDBu6TsIs4Xc7H3:mu+Q4pKPAxqrXVBZe56bXc7QuRk8j","tlshash":"23737336a18115157533d2adeba2a74eeb556007f20291a93fad72420ffe818c653ffc","first_seen":"2026-06-22T12:55:00.178622Z","last_seen":"2026-06-22T12:55:00.178622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":356,"receive":0,"ssl":495},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;700;900\u0026family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:32.835Z","timestamp":1782132872835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;700;900\u0026family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pay.bi/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Jun 2026 12:54:32 GMT\r\ndate: Mon, 22 Jun 2026 12:54:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11329,"size_decoded":1508,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3a913fa161f3cdc0a8697683df490e19","sha1":"4fa486d42ed62afd26d51e1799cd75f0c7e89915","sha256":"fb32eb3b5485c1ba916cc9b1e56f4ad33858c1725c81e830f1724c5b25265bd7","sha512":"f58a4713f15ca741b3cc2912dad6907d06e079fa511b63d97f973a6bf33dcf9974066ff24763202dfebe3c4c149e5fd64333c41715d3a0584cb64e20cd6f06e3","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGng6gMgB:vXuM0p2+7","tlshash":"d532ba92002be500ab931dc273cf7f3aae8e50886485d5795ffd0cc5acead66436876d","first_seen":"2025-12-12T08:47:20.528758Z","last_seen":"2026-06-22T12:55:00.180039Z","times_seen":7,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":56,"connect":16,"send":0,"wait":34,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.064Z","timestamp":1782132873064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pay.bi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385600\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-25T16:19:49.474868Z","times_seen":218805,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":21,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay.bi/","date":"2026-06-22T12:54:33.232Z","timestamp":1782132873232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://pay.bi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Jun 2026 18:44:45 GMT\r\nexpires: Sat, 19 Jun 2027 18:44:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238188\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-06-25T13:28:46.942978Z","times_seen":5307,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}