{"report_id":"144f0835-cce2-4acb-bcb1-35b3a59db962","version":6,"status":"done","tags":[],"date":"2026-05-30T00:08:45Z","url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"title":"Claim Free USDT | clickpayz.site","dom":{"size":1581,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (341)","md5":"e429f50efa7ea886bfbd21013a84649e","sha1":"7457f073bdb4cab66d44026e93e2158523808358","sha256":"5e4d23f4c4fc964a111fc50b20d932bd1ed17b945feb3ab1757ac73be6da0f53","sha512":"0627413e322abb69c4163534ae0e40e9c1eb65e8e4764c67505f8a95932fb54dde0163db2e3d55fea746413d73291bffb9701c491ba9b322062ac73d33ddbb03","ssdeep":"","tlshash":"fb3162eb809f112669471a957aa0a7c83027c04feda2fa457dbd0729cf48da758437dc","dom_hash":"domhash855a4137af5edf0f75458ac5efc51211","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T00:08:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"fexapay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":2,"received_data":33711,"sent_data":1022,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trxpayz.com","ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":394066,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":13,"received_data":397845,"sent_data":7102,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fexapay.com","ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2026-05-30T00:08:47.340388Z","last_seen":"2026-05-30T00:08:47.340388Z","alert_count":3,"request_count":3,"received_data":341675,"sent_data":1424,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"comorosmaritime.org","ip":{"addr":"203.161.58.67","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2016-11-26","domain_rank":0,"first_seen":"2026-02-20T04:01:51.976093Z","last_seen":"2026-05-12T08:58:21.954613Z","alert_count":0,"request_count":1,"received_data":875,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"clickpayz.site","ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-05-30T00:08:47.330574Z","last_seen":"2026-05-30T00:08:47.330574Z","alert_count":32,"request_count":32,"received_data":1762256,"sent_data":15755,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"timeago","description":"Timeago is a jQuery plugin that makes it easy to support automatically updating fuzzy timestamps.","website":"https://timeago.yarp.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"zerads.com","ip":{"addr":"162.0.208.108","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2021-12-17","domain_rank":68941,"first_seen":"2021-12-23T05:44:08Z","last_seen":"2026-05-26T04:39:01.404707Z","alert_count":0,"request_count":1,"received_data":1784,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-24T22:36:44.337416Z","alert_count":0,"request_count":3,"received_data":264100,"sent_data":1466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"site-assets.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":380600,"first_seen":"2022-02-10T06:20:21Z","last_seen":"2026-05-27T06:14:34.565809Z","alert_count":0,"request_count":1,"received_data":204,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.surfe.pro","ip":{"addr":"104.21.45.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-27","domain_rank":2879882,"first_seen":"2018-11-29T01:58:48Z","last_seen":"2026-05-12T20:39:49.514548Z","alert_count":0,"request_count":1,"received_data":5310,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cryptocoinsad.com","ip":{"addr":"104.21.23.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-04-11","domain_rank":168910,"first_seen":"2018-04-17T01:36:02Z","last_seen":"2026-05-26T01:38:48.865231Z","alert_count":0,"request_count":4,"received_data":732768,"sent_data":2040,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":2,"received_data":174587,"sent_data":891,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ba11017e366dcbf8adece0f06e0f2b","sha1":"c7da4ac5e2d10de290080a77699135f3150d6094","sha256":"736aa89bcc677786972350897a706d2c21b706fedd6876ab925e2500cd762d7b","sha512":"7bea6949456b0a0f86ad6bdf291868e5380851ee86c8cd10e069f3bdfcb4a4193a86ff1a0f0c4b33604e07b6c9fa7aae923e9f1da43f44dde7573938fe381bba","ssdeep":"","tlshash":"a2e07dc465c21260c15d0279734e015c1bbdc001280fccb2fb3910d60f9583c579ef72","size":324,"data":"","first_seen":"2026-05-30T00:08:54.195192Z","last_seen":"2026-05-30T00:09:17.227007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/theme.js?=786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6951dc811b85a7a2c7e32417c2018334","sha1":"c6ab4e34d9d614271ce2b759cc81798a9c8e3839","sha256":"f914fd9b2c25ae63c13fdb93f533345bec91f775ce6088872829353b3c9b888a","sha512":"5acb0e17ec2ef8df35e1e71d37534d1ee9b6e8e026fc93751ffe1365b875dfdc13f45723ebd19bc5801dd5021ba08462e233b81f2c485f2ce749e88d301a2b87","ssdeep":"","tlshash":"e241e079f710712146afea3d853f63043a27b902d9829008521c95f41fa9a37fee7e58","size":2148,"data":"","first_seen":"2024-10-06T09:18:29.996817Z","last_seen":"2026-06-06T18:09:43.545342Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-06-07T07:51:25.28334Z","times_seen":21979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/bootstrap.bundle.min.js","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fd2f04e75bd7ab1a79d80cdd4c33085","sha1":"e02a14457b25e6df2568b772feab4387c00a4934","sha256":"5edf297381b409d711bc8d27676951a59e151e783412850332519c05243d1e24","sha512":"3b2e41aee25d13780ff7e2cc275d640b99c4ae4877a7863419ac13d49adc7b3e114c3c4e0dfdccfca3f7a44b2078e63159e8eacb648f9e3f9032982dbe10dc89","ssdeep":"768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp","tlshash":"e583d54a7254b47206dfa176807f460fb2376899a50b802cb869d8ed2e7cd893177f7c","size":81084,"data":"","first_seen":"2023-03-07T01:06:22Z","last_seen":"2026-06-07T07:48:51.827597Z","times_seen":2884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/sweetalert.min.js","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"43b5521d763285a0eabad8821b760950","sha1":"15572bba4d4ae5ab849513b8d0647345c486de33","sha256":"26c6b253d74f84feade601e3155b6dea6655e6838dfdd9f0499f9a1387c5bf46","sha512":"31d4c2b9014da50794c53f042f79bb96178608386d051bf09fe0b908aea7e1043ccdca62c70e0a452749a8a9424230e4b8a1500e15231eda89223bcef3f4145f","ssdeep":"1536:voClwOpyedtzLMltSxiCCtsd5ogzSJYrwrO:gCyOwedt0SoCCtsogzSJi","tlshash":"9c63e585ba403133aa7b4174649be609b6a56402fc330c18f529d1d84ffbe8f6572fb9","size":72858,"data":"","first_seen":"2023-03-14T18:50:47Z","last_seen":"2026-06-06T18:09:43.548512Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/login.min.js?=786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4de3309a920767ad178cc4b79bb4639","sha1":"2ddabca8fa1ebfad02fef89f8c5f26d64d40dbea","sha256":"6c20c97438762a6c2f34eaeb2522699a13460ea95f30e10629cb557c90208587","sha512":"c2a505f030102f7d4b7b100c880e178ae59d8599de972a6c789df4fb321f1b7ea719dda7fd06f814d2e261fab88015885bdeedcd5effa000b304aadf8ccefbe9","ssdeep":"","tlshash":"e341c08db7ae26b64a73b27c13af40017f3960231509fd443a1c60cc5f9e26c685af76","size":2300,"data":"","first_seen":"2024-10-06T09:18:30.353253Z","last_seen":"2026-06-02T23:38:55.241528Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/shortlink.min.js?=1","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"39675833e734140c4fa67dc43b705a40","sha1":"41b781729a5e66077a201b4528e0c5d569f47ebd","sha256":"b9b10e95377d27a63ac933b94f470b22cef640bbad1452f4b8901ca727c8b5dc","sha512":"9ee4d436b564f312082e0d6eb4630607e2474c28a5a7c71f7b89b7a5324eae4938a72636bcfbc5f37f27a004d02eacd9e44ace5fd5de16bc53bb41c78cdf4196","ssdeep":"","tlshash":"5851898e6f7b71684e33b01846ff4501a6a250c79aacc9407c0c64d0efdf2a8596dee7","size":2705,"data":"","first_seen":"2025-07-12T15:24:12.958914Z","last_seen":"2026-06-06T18:09:43.646558Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/home.js?=786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c4feef6c511599af6045d112fd6cb0","sha1":"4635f3dc8cadbb50ebf58b5b3ca48599a652c46c","sha256":"c351ec862a07faccadf8edaa94bcf163d3a38735251b8a21e0c1519e2a6e0963","sha512":"bc97d72d3929bbcfe1673ab7b4881bc01ffcc4d41acb1ef907d93e0162adeeababa1cbb207a5a361d7d149c153a60651b8126f3aafbb91cb7cadab1b007ee341","ssdeep":"","tlshash":"d63177abbda638305bbbb8765b2fa284653200121004ee437e0c85d14f25f585e7bae9","size":1826,"data":"","first_seen":"2025-07-12T15:24:12.979566Z","last_seen":"2026-06-06T18:09:43.617049Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/timeago.js/4.0.2/timeago.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2d4c53400d0a46de704f5a97d6d04fb","sha1":"612bbc85fda1f13b6f0c129d2d8f084d68ff3583","sha256":"b13bab0e2d9eb4b37d0a99d4228082f72e62ca76f6aabfeea3a409ab3a0eee60","sha512":"4950e1d731f937d0a1a1f4a53402b8de570d4bb956cdee834d5c752425c7d539a7a3ed3fd6332975b47c60380351f714acfa75c72139dc6e36185adc33408c56","ssdeep":"","tlshash":"a74186cd3590b86357633f7188af908a6131ae69ac4b8400b654f6d27c72cbd0577ed8","size":1915,"data":"","first_seen":"2023-03-13T16:18:12Z","last_seen":"2026-06-07T05:47:05.528578Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2214749a790608c0948d78197026ee3","sha1":"020c62bf2166b239fa84f2c543938cd835c215c5","sha256":"78acc6bd55e1ae3ab62edc22a27b52f0789383c7525a940dcde29e5875f2d99b","sha512":"0ea3ce0973f521f0ac1bcd6289c30a8bee56a19c7ac890d7294749e904f9906c5ef29f943ccd7a5dcb57e6be14a0de686ce41a4718c091a40084b59561520652","ssdeep":"","tlshash":"53f05c4bbbc9541a5e3374a6237fd8883811b4171e46c626b96d0b921f48e3868adbe4","size":562,"data":"","first_seen":"2026-05-30T00:08:54.19603Z","last_seen":"2026-05-30T00:09:17.22789Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"27df29314ae0ee0537e6a9f543ba6d8e","sha1":"be8a7fcb64ddff8ba6a1f406c26ea22384b36342","sha256":"a4ba7d2fd89fafb2255f44985456971305219f38448712ad8c8f774b42c51ac0","sha512":"be6baf613c04521dc9a3bd6779ab257cdb6d1e09672bfebd7a329ec1702bf576bd7ce5e9a2296cea5d644acdc593de0065b106bcc136daf1b5b60778faea7bb8","ssdeep":"","tlshash":"e5f0a755526510310523a53b5f2ea211a673914318bebc7679dc03995f4922c44b8bf4","size":637,"data":"","first_seen":"2026-05-30T00:08:54.196896Z","last_seen":"2026-05-30T00:09:17.229291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"94ee06e068f632fd18444e59b2762314","sha1":"7ca5198403cd375395bd914167c1e0c1f1f93930","sha256":"4bb028a60f5452559504d08167f8fe83dbbe24558094ad02f4bdaa3b4db31844","sha512":"abf2f46da760cee333fdc9dca1dabb129ac180eff32fdafcf8d6f531e74ad516a07a51932fb940febe77ac2f3ecedb4821332722a57be473fdca1931c5cbd4de","ssdeep":"","tlshash":"16f0e02f32b10431059bb16992ab97c83b7050033101d9453d9e85115fb5bf4b1fa989","size":564,"data":"","first_seen":"2026-05-30T00:08:54.197599Z","last_seen":"2026-05-30T00:09:17.231183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/jquery-3.5.1.min.js","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ac39dc31635a363e377eda0f6fbe03f","sha1":"29fa5ad995e9ec866ece1d3d0b698fc556580eee","sha256":"9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38","sha512":"0799ae01799707b444fca518c3af9b91fda40d0a2c114e84bc52bd1f756b5e0d60f6fd239f04bd4d5bc37b6cdbf02d299185cd62410f2a514a7b3bd4d60b49fc","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"0693f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T05:58:36.902619Z","times_seen":7503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.surfe.pro/js/net.js","fqdn":"static.surfe.pro","domain":"surfe.pro","tld":"pro"},"ip":{"addr":"104.21.45.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73fbb63ba6038858cde62021a456ceeb","sha1":"b6f92d924204479130e91b1f7574acd69aeceff5","sha256":"d4440e72c2c1e11a92577da7f30ae8587d51135d063dc39bbff5ff1bd05a45a8","sha512":"de7a96986325158870b204adc09a6f13cd0c618763925a49803615b2e5ab3af4358e735a5ac7356346bd45500b969aec0bddbb0310179321fb6fa8fa7e72fa60","ssdeep":"48:dwIQiTZPduAHo+MGEnePio34Zzkw6VLDMlQs1u2XIbP26z5lPb2SH3Unciz+cCg2:5FI+pnp/HyXIbu6z5tqauCR44RtiNy","tlshash":"a191eaf43b8025f2a6a6c4dc185fc00ebbe6371a395ae0a1d9e5c4453dc02e51267f8f","size":4615,"data":"","first_seen":"2024-08-24T19:26:17Z","last_seen":"2026-06-07T03:57:10.236809Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f406dcd8209f1ba36d0821c11db0455","sha1":"975034b41771caf23dde472dbd060cf1147d4dcf","sha256":"cb1a22836be7a1149a42df4e8e8b67087d65cac97d62adc41a748eb098380e1a","sha512":"ea15722457d9acc7f5aa72796e12c07460c276d111244e5e02117105839eef2c03926a9a23dd8c197a9e24a677fa6a08added294f99ec784aaef5ef72e90dd91","ssdeep":"","tlshash":"1df08b6b78a61e3248bb2e6b52d787f07a289ce7188e86177a6dc6440f00b8165747f4","size":573,"data":"","first_seen":"2026-05-30T00:08:54.198458Z","last_seen":"2026-05-30T00:09:17.232746Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2afc13b0fbd0c77b68adc409caea728","sha1":"87080a7f5a3397b46a5318914b4661b233d995fd","sha256":"ece557478e97d54208d235fb858469acd155125dba61900634e7eee4b68df4a4","sha512":"80cec0e815ad35014ef7c723edd854c5acacf0965406836f3e54f93d4e88c58df82b215f1ced0af02c7b348b656e0ca2385a206d999ce0f7f3b68ec39692e339","ssdeep":"","tlshash":"f590021ba203081c4020b4c4312f3508b741019440b91410460100209cb50cbd5200c4","size":46,"data":"","first_seen":"2023-03-07T12:23:34Z","last_seen":"2026-06-07T03:57:10.268451Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"07bcf55b9a035d6492e86bd0ed39be3a","sha1":"01c590f95fdd68e48c7157e32134c47bb161edfd","sha256":"8cbdae1b1ad5d4b476b378736281c7cdd040b7f56f752e1f375ef4146fac3ea3","sha512":"d49f4c762c7164f7084fa5e407facd40c5e99685c98d11fd1655c13b3cf70058f94029224671823d42d498ea799d2ffa758b15502a9f00606008d2e74631ed80","ssdeep":"","tlshash":"bda02200308280b0c83203e2c22003eea280000a28083220c3e8080c2c828220302b80","size":59,"data":"","first_seen":"2024-10-06T09:18:30.375382Z","last_seen":"2026-06-06T18:09:43.70356Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"0d086c553b9bbfdda5afa6f3e0874894","sha1":"42c63fa4085175c2c3b344ebd6283470b89b287a","sha256":"884b458fcee23fa914e7c436ace32b0d50102ab9f224a05dc86a55ec03232c25","sha512":"5acc01499f780461dedc2bf0584605fb31ee7402b450a05a5e1fcc6d0bfbd7d22202f08441230e7bcf0b44f89622784bab3ac0d424e6002c7c1a0cb5bc6022fe","ssdeep":"96:gd6PwM5KA3uXzv2aDzGo1tYD2LEuVzTqyYpwACn8pxnXP:/8GLwCD2YV8n8pN","tlshash":"20c1c61876d0163642fb93ada0bfbb3f723f7162980ec0409334d8993d68ea6143796d","size":5825,"data":"","first_seen":"2024-08-24T19:26:17Z","last_seen":"2026-06-07T03:57:10.269379Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8b65b2c67e9c3ecf5accba583eee489","sha1":"34f084de37fffd9a98a3371778e68333edb55055","sha256":"9f6b7da19e3ce187faeffd0f45074510b6a48522767afd0877da188040569d4f","sha512":"1ca4888421eff3370f391b8d1a68323dc9fdee000dd711765b5641afbf0430892c7ce662274a2143126f575e7c028e5c0e65c096b3efc0cec30abbc6c51252cd","ssdeep":"","tlshash":"a701f7e3c8d42cb0896fb0671b3fe1213d32144b9451e51535ae0b0edf4695887aaea6","size":750,"data":"","first_seen":"2026-05-30T00:08:54.201987Z","last_seen":"2026-05-30T00:09:17.237218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0fb5676a68c13322dd600ea4724d32b","sha1":"14247ace84b7456273b1243fcbf0c26f6a89e6a7","sha256":"92fbf37821ddc2f2b46a08190554d5dc8d649defbc3312a8dfbc250c033539b3","sha512":"c92b541be6435207033b7ab6621e1d47d0a25dd727166a5b30733ab70a6900f69302be317578be508cc10a2a2ff7a4de5e5d4be9d5a7e99eaedc22a267cdd284","ssdeep":"","tlshash":"14017b6a2ab544f471f7419717bfc3cd306610a76516c080b88f99c42f28dd344057ce","size":847,"data":"","first_seen":"2026-05-30T00:08:54.202745Z","last_seen":"2026-05-30T00:09:17.238821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 02:14:26 GMT\r\nexpires: Fri, 28 May 2027 02:14:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 165238\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-06-07T07:47:00.808239Z","times_seen":27397,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 06:02:46 GMT\r\nexpires: Wed, 26 May 2027 06:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 324338\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-07T08:14:53.475579Z","times_seen":254046,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":111,"dns":18,"connect":32,"send":0,"wait":33,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fexapay.com/ad/logo.png","fqdn":"fexapay.com","domain":"fexapay.com","tld":"com"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fexapay.com/564565/mycryptoads300.html","date":"2026-05-30T00:08:25.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fexapay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 16:54:46 GMT","end":"Mon, 29 Jun 2026 16:54:45 GMT"},"fingerprint":{"sha1":"A2:79:28:42:41:C9:51:17:70:E8:92:81:E4:97:2A:DE:E9:14:F2:97","sha256":"79:BD:39:61:A5:FD:7E:DB:D9:7F:B2:03:F7:0D:51:EA:98:0D:A9:43:4B:6E:5F:33:27:C6:AD:F9:B6:51:27:7D"}}},"request":{"raw":"GET /ad/logo.png HTTP/1.1\r\nHost: fexapay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fexapay.com/564565/mycryptoads300.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Oct 2025 19:05:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 169127\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":169127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"3bb2656cc9d8718012b92654e611733c","sha1":"c00b2ecddbf3279f074a241696d112f4707b6ab1","sha256":"b9eba8428de6bd5b6ba1312f7fbae0c12336912e9f0865827b013a575456d1bf","sha512":"b7e914d189e2707461356d20f012ff5bb129d6a076cd51e9d02f0e30a28c50053b00e343d80125d7578ce7cf02f4ddc5d634b509fb4cd7e63eb4d6f6a27233b3","ssdeep":"3072:V3nhdgjwJpB206CFDoHzIO+XvaFuJMJqBknWKvlg+W+EG74QbgGeapDCkWZWI:Nnhdga4064MHUzvRWoAmWERQUGeas/","tlshash":"2ff312b74169c54517c384375a682e6e7b222b884fc421f8b351897867b83efb0d17f9","first_seen":"2026-05-30T00:08:54.14855Z","last_seen":"2026-05-30T00:09:17.143789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"fexapay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocoinsad.com/banner/ads_banner/30846.gif","fqdn":"cryptocoinsad.com","domain":"cryptocoinsad.com","tld":"com"},"ip":{"addr":"104.21.23.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocoinsad.com/ads/show.php?a=260948\u0026b=400194","date":"2026-05-30T00:08:25.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocoinsad.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 02:11:54 GMT","end":"Thu, 02 Jul 2026 03:10:31 GMT"},"fingerprint":{"sha1":"A3:C8:CD:1D:DE:30:6C:45:8A:7C:00:0A:1C:B9:01:52:CD:90:98:5A","sha256":"DB:30:62:67:B1:18:57:27:5A:5C:8E:9A:F8:D9:BD:53:3A:5D:C9:2E:37:66:F0:CE:75:81:96:9D:42:D5:6B:18"}}},"request":{"raw":"GET /banner/ads_banner/30846.gif HTTP/1.1\r\nHost: cryptocoinsad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocoinsad.com/ads/show.php?a=260948\u0026b=400194\r\nCookie: i_283139400194=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 566654\r\nlast-modified: Wed, 13 May 2026 15:51:02 GMT\r\npriority: u=4,i=?0\r\netag: \"6a049de6-8a57e\"\r\nexpires: Fri, 12 Jun 2026 15:51:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1412238\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1TG5DTOD3f0Y1UK8wZxoafYXBumYDCz9dYxIqy6%2BUWHFTjPC%2BovUrNVduIrOzuKQ7WggS8vq5sxdhD6wYiIBBylVUc0aMM0z4OzmUAMSiVqYIZnSEnY3ILPlQvuKCQ%2FyU9JIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0398117585da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566654,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"e73bcdbfc9bdfd8150a74c6989eb473a","sha1":"c70cdd898e9b29a4f8963cde6edb1dfd381aecb9","sha256":"bb28eb48f17d5989819b6f6a3bd838c760d125f07b5160afc0d446b8c3489446","sha512":"68fc482b468a33de6bc71d79d8e64ec42343dd33295d6398473ce4195cf7b852d514f3db3992e1fd1bcfa643a45601b6b3c3264b99bca7ee7d7149da119187e9","ssdeep":"12288:wD5GR9zo0wpW5fJ5EP5i/DbOZrj3iZnUpHVOVj5MtNMkIEnPz//3Slk9AM:wD5GPo0wppM/GdmUpHMrsmk37nj","tlshash":"cbc4239b651ec053366f38f12312e9315bf84dd9447bb63288dab83a3d4958c91ecaf1","first_seen":"2026-05-30T00:08:54.149677Z","last_seen":"2026-06-01T19:27:26.27391Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"comorosmaritime.org/icon.png","fqdn":"comorosmaritime.org","domain":"comorosmaritime.org","tld":"org"},"ip":{"addr":"203.161.58.67","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerads.com/ad/ad.php?width=300\u0026ref=10974","date":"2026-05-30T00:08:25.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.comorosmaritime.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 10:56:39 GMT","end":"Mon, 03 Aug 2026 10:56:38 GMT"},"fingerprint":{"sha1":"7B:D1:A8:95:64:AD:8E:06:E4:72:36:C0:4F:29:4D:47:FB:AE:C2:D6","sha256":"E1:AA:15:C5:38:73:42:C6:CE:7D:41:E9:04:FA:99:82:48:5C:B2:AB:E9:CD:11:73:CA:53:79:53:79:44:76:63"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: comorosmaritime.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerads.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 30 May 2026 00:08:26 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 16 Feb 2026 07:51:01 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 633\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced","md5":"e866d373f3711721ba5cb478a4d25a86","sha1":"0db08f52fba2ab0bcde38da6d131c252bd26ccb3","sha256":"58eb80fa685f79fb1ab96256b36b9753dd4b2d678f97d1f5b6bfb6b9fe5c3f7c","sha512":"0d0c376a4d6eb1b8e5ee7fa9bc27dacbd62479ab40a030ffe0a0a137c660aedb064af0e152532f6e2089497aa36c113791baa4f26c323ef1d0b5d2690fe3cfba","ssdeep":"","tlshash":"36f068e0e584b4449e35556107951865eca6718beee18757cc005d11d40558f0fa63d3","first_seen":"2024-04-29T00:43:43Z","last_seen":"2026-06-03T15:22:54.690454Z","times_seen":174,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":368,"dns":37,"connect":161,"send":0,"wait":162,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 06:02:46 GMT\r\nexpires: Wed, 26 May 2027 06:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 324338\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-07T08:14:53.475579Z","times_seen":254046,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":183,"dns":3,"connect":32,"send":0,"wait":41,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/?api=live-users\u0026t=1780099714819","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:34.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /?api=live-users\u0026t=1780099714819 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://clickpayz.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 29\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 00:08:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b7e23a031c7f03882a827a03fff219c3","sha1":"2719e6be40ea237ad036b385220ae2d4613b3000","sha256":"566b01c1a27a61b40ace1deedfe50f8f06b9fe8cabee25ad6125561918ad7a52","sha512":"775cd30931be4141c75bc4f142fea8e1868ab132370d54a68a99998948579ca3e3dd1b803dff6236448c572e455159453fea4baea380a31f03c5837e33959021","ssdeep":"","tlshash":"c0700002b200800b08328800a0b82aa22c8080000000020ae0e0008a0a80f0c8000080","first_seen":"2026-05-30T00:08:54.151635Z","last_seen":"2026-05-30T00:09:17.146541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/?api=live-users\u0026t=1780099719820","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:39.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /?api=live-users\u0026t=1780099719820 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://clickpayz.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 29\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 00:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b7e23a031c7f03882a827a03fff219c3","sha1":"2719e6be40ea237ad036b385220ae2d4613b3000","sha256":"566b01c1a27a61b40ace1deedfe50f8f06b9fe8cabee25ad6125561918ad7a52","sha512":"775cd30931be4141c75bc4f142fea8e1868ab132370d54a68a99998948579ca3e3dd1b803dff6236448c572e455159453fea4baea380a31f03c5837e33959021","ssdeep":"","tlshash":"c0700002b200800b08328800a0b82aa22c8080000000020ae0e0008a0a80f0c8000080","first_seen":"2026-05-30T00:08:54.151635Z","last_seen":"2026-05-30T00:09:17.146541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/css/bootstrap.css","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/css/bootstrap.css HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Nov 2025 19:05:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22216\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":160786,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65406)","md5":"8a9f59e31e744e119076ec7c6960b503","sha1":"bc13e8443d2c36d9db4eb9af529b31d0308145d5","sha256":"0af679f93829f3d0852bd37d919d15dd46893eddcb771493acc5ef0214356eb9","sha512":"81ca401264bedc11e5de002efbe0d0698f6b12b080837b440789f0d915187382baca2b0fa6c0f48bdff5fc75879987e3b9613e6be6f8a93342438803e7454aad","ssdeep":"1536:EtFgI5KbS60cyEBBD6zg1nNaYS/3sQFLAeNc3SYiRENM6HN26d:cFXVF0Uc3SYiRENM6HN26d","tlshash":"0bf363a6f5a0312de4a7c61960d0bafe156f8145d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-10-05T16:48:03Z","last_seen":"2026-06-06T18:09:43.599513Z","times_seen":30,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/videoads.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/videoads.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:52:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18180\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"d8e8a2d9902230c5b9d5ddfe6fb3556c","sha1":"427460ae20d506f6ab5eddedcd3b7fd76a4b8a68","sha256":"ffeac1675b66d386f7641972e8f21c2816dd55c2c68216752131067fd0e4cff6","sha512":"1abb1b46cd2e254a03d212e635257bdc1481209c8e247c2f32803f21ea67981a97cc343b5a795dcc8d48371f2fc0803b940ebcd3c436b0233574733e29727227","ssdeep":"384:RqtubTQR2eOvOW5Ax0PqA0zqCm0MlHrhbfrRD+m+Tgudwt:au/Q0fHAbAomNlHNF/swt","tlshash":"0382c0e634344e26f50d36b85d2401c7692e7a4681f46f2b337e9e11ac4f8d2e8812ea","first_seen":"2026-05-30T00:08:54.154025Z","last_seen":"2026-05-30T00:09:17.185659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocoinsad.com/ads/show/img/icon.png","fqdn":"cryptocoinsad.com","domain":"cryptocoinsad.com","tld":"com"},"ip":{"addr":"104.21.23.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocoinsad.com/ads/show.php?a=260948\u0026b=400194","date":"2026-05-30T00:08:25.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocoinsad.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 02:11:54 GMT","end":"Thu, 02 Jul 2026 03:10:31 GMT"},"fingerprint":{"sha1":"A3:C8:CD:1D:DE:30:6C:45:8A:7C:00:0A:1C:B9:01:52:CD:90:98:5A","sha256":"DB:30:62:67:B1:18:57:27:5A:5C:8E:9A:F8:D9:BD:53:3A:5D:C9:2E:37:66:F0:CE:75:81:96:9D:42:D5:6B:18"}}},"request":{"raw":"GET /ads/show/img/icon.png HTTP/1.1\r\nHost: cryptocoinsad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocoinsad.com/ads/show.php?a=260948\u0026b=400194\r\nCookie: i_283139400194=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 3309\r\nlast-modified: Thu, 12 Jun 2025 09:47:56 GMT\r\npriority: u=4,i=?0\r\netag: \"684aa24c-ced\"\r\nexpires: Fri, 26 Jun 2026 01:09:47 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 255517\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDNZomZ1juYa4A1fSRbn32pWQIFlX0kYdnh%2FWEA0uuGwsMKqo30oGBFXSK9YOWfl3zFIqJIGZepVhbgjS2rl1%2FU4VSN4t1%2BpyICEbqYaQvK20g30v2T08bWuPmH7F7atVlllOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0398117585ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 435 x 435, 8-bit/color RGBA, non-interlaced","md5":"865296d690eff9da3a1bb21590faa79b","sha1":"50fd13c32e6f6f0b5aa444c921c6241fcb41b5b3","sha256":"b14ef09e5d084f7cb785998d54d37e486619c9b9527e72776a7c9d2b7e85c828","sha512":"3eec63deb0f9700f85b140842eccd59257bf7f7c9e5f0d58cef25c68bde28fc36ce12a163d0d337d4023d27c26f3c53787eb1e812bd7ab187cbdb6cbde6c75c6","ssdeep":"","tlshash":"19614cce2274485583b9dadf318922069bc5d315527fea2f45077df87642c2f42e2a45","first_seen":"2023-04-09T11:24:37Z","last_seen":"2026-06-06T04:29:00.872024Z","times_seen":457,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/jquery-3.5.1.min.js","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30274\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"9ac39dc31635a363e377eda0f6fbe03f","sha1":"29fa5ad995e9ec866ece1d3d0b698fc556580eee","sha256":"9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38","sha512":"0799ae01799707b444fca518c3af9b91fda40d0a2c114e84bc52bd1f756b5e0d60f6fd239f04bd4d5bc37b6cdbf02d299185cd62410f2a514a7b3bd4d60b49fc","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"0693f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T05:58:36.902619Z","times_seen":7503,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nage: 36375\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-06-07T07:51:25.28334Z","times_seen":21979,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":6,"connect":26,"send":0,"wait":28,"receive":13,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/bootstrap.bundle.min.js","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20813\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81084,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"7fd2f04e75bd7ab1a79d80cdd4c33085","sha1":"e02a14457b25e6df2568b772feab4387c00a4934","sha256":"5edf297381b409d711bc8d27676951a59e151e783412850332519c05243d1e24","sha512":"3b2e41aee25d13780ff7e2cc275d640b99c4ae4877a7863419ac13d49adc7b3e114c3c4e0dfdccfca3f7a44b2078e63159e8eacb648f9e3f9032982dbe10dc89","ssdeep":"768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp","tlshash":"e583d54a7254b47206dfa176807f460fb2376899a50b802cb869d8ed2e7cd893177f7c","first_seen":"2023-03-07T01:06:22Z","last_seen":"2026-06-07T07:48:51.827597Z","times_seen":2884,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/clickpayz.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/clickpayz.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 23 Mar 2026 18:13:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 60467\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"57b5b7885934d653cdc1049ce27e9f38","sha1":"42f7af9da23e2d48dc9a4b404a19cc4579a5a049","sha256":"0b09d6b0f09d62e7a71bfb3703e713944b3e1351cc47700099d8cbdb10f7599e","sha512":"0ebfb5cb4aa49ca3a3ffd4a5ce9ea7ff81a01ba35bee1c14fce04c2266ca7f1782a42c40b655286a01948fbcbefb20bf0150094ac4a15d71d2c2f4df7db923f4","ssdeep":"768:qxuUAZwdppMlWhyzAmkjvkeGvDoT7RsP1nzeMvd1QQ8EkCjHmyefNuQLXAqngaSa:q5kIklsm+8eG7oTNsdzeA/QQVnoXRSa","tlshash":"1b43f1ccd9771763c0bf12ba729386589f035eccd4a5a355e64baa1d82d3cd0887619c","first_seen":"2026-05-30T00:08:54.159117Z","last_seen":"2026-05-30T00:09:17.127251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fexapay.com/ad/logo.png","fqdn":"fexapay.com","domain":"fexapay.com","tld":"com"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fexapay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 16:54:46 GMT","end":"Mon, 29 Jun 2026 16:54:45 GMT"},"fingerprint":{"sha1":"A2:79:28:42:41:C9:51:17:70:E8:92:81:E4:97:2A:DE:E9:14:F2:97","sha256":"79:BD:39:61:A5:FD:7E:DB:D9:7F:B2:03:F7:0D:51:EA:98:0D:A9:43:4B:6E:5F:33:27:C6:AD:F9:B6:51:27:7D"}}},"request":{"raw":"GET /ad/logo.png HTTP/1.1\r\nHost: fexapay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 10 Oct 2025 19:05:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 169127\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":169127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"3bb2656cc9d8718012b92654e611733c","sha1":"c00b2ecddbf3279f074a241696d112f4707b6ab1","sha256":"b9eba8428de6bd5b6ba1312f7fbae0c12336912e9f0865827b013a575456d1bf","sha512":"b7e914d189e2707461356d20f012ff5bb129d6a076cd51e9d02f0e30a28c50053b00e343d80125d7578ce7cf02f4ddc5d634b509fb4cd7e63eb4d6f6a27233b3","ssdeep":"3072:V3nhdgjwJpB206CFDoHzIO+XvaFuJMJqBknWKvlg+W+EG74QbgGeapDCkWZWI:Nnhdga4064MHUzvRWoAmWERQUGeas/","tlshash":"2ff312b74169c54517c384375a682e6e7b222b884fc421f8b351897867b83efb0d17f9","first_seen":"2026-05-30T00:08:54.14855Z","last_seen":"2026-05-30T00:09:17.143789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":85,"dns":55,"connect":22,"send":0,"wait":34,"receive":483,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"fexapay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nage: 31033\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-06-07T08:09:45.712579Z","times_seen":21512,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":5,"connect":28,"send":0,"wait":27,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":147,"dns":3,"connect":31,"send":0,"wait":36,"receive":5,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/css/theme.css?=10","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/css/theme.css?=10 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5707\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34243,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34243), with no line terminators","md5":"e3cbb4d34e52d22767221e5ed4fd1e45","sha1":"2c30c543098dd08bb5077f59ae57279ca9c5b1bd","sha256":"841ef905dd57fb4fcb48421d8b1dfe073615480be5cf8c7f921ff055879509f4","sha512":"a4a17e1e718c9087578e14d17936e9a5c6ad02dc9876c42d2723b7eff2706bf3e18a89f213517f5efac45b260c3f93f28d66cf05dcf22b895a287a6590cc47a0","ssdeep":"384:3hk2bV0Hl1YGWMGVa3VFk3VDrLt6o1hs4tXOe7TjOiQ8t6gy9bRst1I:3On3YGjQNrLt6o1hs4t+2jOkrz8","tlshash":"49f20155f549301bb86bc729e1d1be97172b0387e52a0f7bf82a77a44b4a1c53223f09","first_seen":"2024-10-06T09:18:29.987615Z","last_seen":"2026-06-02T23:38:55.238877Z","times_seen":20,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026family=Poppins:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026family=Poppins:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 May 2026 00:08:24 GMT\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18628,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"217f49b1c26cc0ab2b636ff4200de0c1","sha1":"d22413b99ed443715f5046c854ac12355c388d27","sha256":"5e13e9bd6a28edd337c0612271ec7f99a4caac4b0160f1766c690d5d8d24c09f","sha512":"d5d924a7260f0af0f3ed1ef98bd0dc777da6ebb72f9135cc83ab1624afb4b822d9aa87c2d7e9e24094ad11687a6fc9d29526178fcb71688c80a38bbfa4a43cfd","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHTgKQcXr31:vXuM0p2+g7/","tlshash":"0482de92042be400ab871cc223cf7e3abe8e50856445d1796ffd0cc9acebd66436576d","first_seen":"2025-10-11T03:49:44.722109Z","last_seen":"2026-05-30T00:09:17.219532Z","times_seen":7,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":20,"receive":0,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/offerwalls.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/offerwalls.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:52:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107143\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"da8af2bf3ea65b84bdcc5d889d8eed8f","sha1":"52c02d2ab9557ff1a352d3bf505b3376c2ea1e67","sha256":"15d25fe2b996d11f0fd36420e17003bdc84e4910164bb89a585611ac99c5f4c4","sha512":"3fb5e19dba9dfe81e66399ca48658d4838f98794f43830e83a4bbd276bae081813ad970c979f19c5a0a49c8524ce8026ae2d20a1c34ab8d41fbe1530f2c1701a","ssdeep":"1536:ZEjKc3A3NZr1l3w5c3JfJVloLdvt3iby+2TAQEkvkmYiceiC7w:ZcKZ7r16QRbIQ4AucmY1rC7w","tlshash":"57a3123fbcae0f64d28910bdb007bd689912bb72fe1b2259f597b4f1968679f1050213","first_seen":"2024-08-19T20:48:00.868247Z","last_seen":"2026-05-30T00:09:17.165991Z","times_seen":3,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fexapay.com/564565/mycryptoads300.html","fqdn":"fexapay.com","domain":"fexapay.com","tld":"com"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fexapay.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 16:54:46 GMT","end":"Mon, 29 Jun 2026 16:54:45 GMT"},"fingerprint":{"sha1":"A2:79:28:42:41:C9:51:17:70:E8:92:81:E4:97:2A:DE:E9:14:F2:97","sha256":"79:BD:39:61:A5:FD:7E:DB:D9:7F:B2:03:F7:0D:51:EA:98:0D:A9:43:4B:6E:5F:33:27:C6:AD:F9:B6:51:27:7D"}}},"request":{"raw":"GET /564565/mycryptoads300.html HTTP/1.1\r\nHost: fexapay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 10 Dec 2025 16:36:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 743\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2275,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4b775e87b3f57801744e1a8c716d2b1d","sha1":"5f23c6ddfb534a24e4ebe54c178c8eb6569d2a71","sha256":"c3d601c32613061fcf393a212afe98b7962754285f5d1b6439e6f8ed06372677","sha512":"81f5bab5e9e3957c67cf0fb786e9463ed403549de256d628333cae451521ee27b1ca2e0e5128198650b5fc1e07f9e8e1802ee73896954ed5023664d0bfeecf0f","ssdeep":"","tlshash":"0e41222aca4625076233d3d49f72474ac7218017db1315697bee2b660f7a46e4453fdc","first_seen":"2026-05-30T00:08:54.163429Z","last_seen":"2026-05-30T00:09:17.198559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"fexapay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zerads.com/ad/ad.php?width=300\u0026ref=10974","fqdn":"zerads.com","domain":"zerads.com","tld":"com"},"ip":{"addr":"162.0.208.108","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zerads.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 03:57:56 GMT","end":"Wed, 19 Aug 2026 03:57:55 GMT"},"fingerprint":{"sha1":"DA:AF:BC:3E:1E:3A:C1:EA:27:D6:24:CB:B2:5E:22:79:35:3E:0C:2E","sha256":"34:57:D2:09:DF:C5:31:9C:18:E5:98:36:B2:79:B8:A6:84:A7:32:81:79:82:31:3B:75:DA:BF:42:2C:4E:FF:60"}}},"request":{"raw":"GET /ad/ad.php?width=300\u0026ref=10974 HTTP/1.1\r\nHost: zerads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 30 May 2026 00:08:25 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding,User-Agent\r\nContent-Encoding: gzip\r\nContent-Length: 687\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (321)","md5":"d93ec64546a147c42a62528a8daef87f","sha1":"8b303ca6cf34cb592e5f2f369227f5e9a1466108","sha256":"0068629c5c32a9ba72685a740c6203771e4b7e1516a24dc057e925f76ff95ff9","sha512":"478bd78e557393589e7d3de0a905cd57eeb78870d5b4859f16dab6a4f9b90b5ec3ce1ea62eb6efbd5d623a2b880856012d10f7a6acc39fb20ac9e33170e50d6b","ssdeep":"","tlshash":"323189db849f11156947069579a0ab883023c08fddb1f9453d3d0779cf09ad714827cc","first_seen":"2026-05-30T00:08:54.164288Z","last_seen":"2026-05-30T00:08:54.164288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1455,"timings":{"blocked":663,"dns":330,"connect":149,"send":0,"wait":154,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/payout.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/payout.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:53:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30410\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"648f36f5f65522fa672284014f8fe7c5","sha1":"2c3d15c89c3b9c5f7473ec89d96e96c3d691e759","sha256":"11ce73ac62075a2b17d08f773d85a5becc2ae741e80599cc0fd30d2e53f96f99","sha512":"5888e0808911cb66800b0a1728ef78079f7ae822c0eaa8ca167b135df2546cda340cbf9c136a2015171667f0a06091c68f9bc0fb82350f6b2060c61af2681d29","ssdeep":"768:PQcZgx/0wjdFNNrSqd1N2Wm3UZ6+SGP017pWOsjQ:PVZM5jdPNXH2RwkGOtEQ","tlshash":"1fd2d0d070b5ea3582d7601f5f7d42a10314f80be87976b08970dd2a6fbaa11ce4de6d","first_seen":"2026-05-30T00:08:54.165004Z","last_seen":"2026-05-30T00:09:17.122745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/adsweb/usdcpayz.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/adsweb/usdcpayz.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 17 Mar 2026 17:25:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 148526\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":148526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b15ca962071bd7d95cf393169b3e91ce","sha1":"4423854e3f218931b4d7fbc77c059e1942dcb85a","sha256":"f87a8e273a70e20eb2ffec5f2ff76e150ba8ef8d41426d7e549603bab0a6b16a","sha512":"f9fab2204bdc2a5e9760c4c5d9fdc0375947c144424f4aa168770abe2e997538ef4b7f174ef0121c7e1845671b13c0a7220a2dda2569092b287f3d1e5b60eb91","ssdeep":"3072:tpbQ8DX10OiplbfdHylfgqBZKolfF1lCZYOyl1dk6V/fpe6cJTfebD:tpMOurVym2ZzCZ9udkx6MfebD","tlshash":"28e31261a09face39753bc005ec3f40ceeb29bb56bdf16760e370c85e92da451c29606","first_seen":"2026-05-30T00:08:54.165839Z","last_seen":"2026-05-30T00:09:17.18911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1067,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/home.js?=786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/home.js?=786 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 531\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1826,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f4c4feef6c511599af6045d112fd6cb0","sha1":"4635f3dc8cadbb50ebf58b5b3ca48599a652c46c","sha256":"c351ec862a07faccadf8edaa94bcf163d3a38735251b8a21e0c1519e2a6e0963","sha512":"bc97d72d3929bbcfe1673ab7b4881bc01ffcc4d41acb1ef907d93e0162adeeababa1cbb207a5a361d7d149c153a60651b8126f3aafbb91cb7cadab1b007ee341","ssdeep":"","tlshash":"d63177abbda638305bbbb8765b2fa284653200121004ee437e0c85d14f25f585e7bae9","first_seen":"2025-07-12T15:24:12.979566Z","last_seen":"2026-06-06T18:09:43.617049Z","times_seen":21,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":96,"dns":5,"connect":41,"send":0,"wait":31,"receive":4,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":41,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocoinsad.com/banner/ads_banner/30710.png","fqdn":"cryptocoinsad.com","domain":"cryptocoinsad.com","tld":"com"},"ip":{"addr":"104.21.23.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zerads.com/ad/ad.php?width=300\u0026ref=10974","date":"2026-05-30T00:08:25.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocoinsad.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 02:11:54 GMT","end":"Thu, 02 Jul 2026 03:10:31 GMT"},"fingerprint":{"sha1":"A3:C8:CD:1D:DE:30:6C:45:8A:7C:00:0A:1C:B9:01:52:CD:90:98:5A","sha256":"DB:30:62:67:B1:18:57:27:5A:5C:8E:9A:F8:D9:BD:53:3A:5D:C9:2E:37:66:F0:CE:75:81:96:9D:42:D5:6B:18"}}},"request":{"raw":"GET /banner/ads_banner/30710.png HTTP/1.1\r\nHost: cryptocoinsad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zerads.com/\r\nCookie: i_283139400194=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 157405\r\nlast-modified: Fri, 17 Apr 2026 10:57:54 GMT\r\npriority: u=4,i=?0\r\netag: \"69e21232-266dd\"\r\nexpires: Sun, 14 Jun 2026 11:17:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 1255878\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aw%2BrtcXhdKlMGdgj5%2FztsYoPKNLLf8y%2BUV4FSKu%2F85yiKR2fQc9z%2FwVrOv%2FmKIa7ozsPR59%2FJ3l%2Btsg3EqrDaiA4BgE7tSBpsj5ufqbdTmrl6sb7Yh7u12kVEXi2bRn2l2Ky3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0398119887ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced","md5":"f5cbbbb31852ebadaeb7d62c0c130869","sha1":"6c88b243b4190148c4f49f6402d31f7033d82700","sha256":"fa7d4a970d626e048805f056e80dec875771116c51c8d6333fdbdc434e853f64","sha512":"10d09b7e064e225bf14420024074b6be052092bfffed456ae24e7d06c49f5a1180cd6a42442b6a720a3efded36ecdc3e363b08ae2c596a13284c1c40aa589b03","ssdeep":"3072:Co7B4mtQcdvJb70+coznbhXvfRocHNDSNVL2crhuk/jJNhlkHB1SH1j:h4dUhb7ncyxXRvNyVRhu+9lkhsH1j","tlshash":"26f312e1194e5bb647b90b6d52b5ff98d1f1c170f084684286e1c34335ae8aeb0ecfa5","first_seen":"2026-01-02T22:17:19.120438Z","last_seen":"2026-05-30T00:08:54.167956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/sweetalert.min.js","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/sweetalert.min.js HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18492\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48156), with CRLF line terminators","md5":"43b5521d763285a0eabad8821b760950","sha1":"15572bba4d4ae5ab849513b8d0647345c486de33","sha256":"26c6b253d74f84feade601e3155b6dea6655e6838dfdd9f0499f9a1387c5bf46","sha512":"31d4c2b9014da50794c53f042f79bb96178608386d051bf09fe0b908aea7e1043ccdca62c70e0a452749a8a9424230e4b8a1500e15231eda89223bcef3f4145f","ssdeep":"1536:voClwOpyedtzLMltSxiCCtsd5ogzSJYrwrO:gCyOwedt0SoCCtsogzSJi","tlshash":"9c63e585ba403133aa7b4174649be609b6a56402fc330c18f529d1d84ffbe8f6572fb9","first_seen":"2023-03-14T18:50:47Z","last_seen":"2026-06-06T18:09:43.548512Z","times_seen":29,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/playgames.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/playgames.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:53:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87030\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8dc338427d11ad6cb0180d4afb129751","sha1":"791832a4f766d1d55caadef64f6bc25ed824328e","sha256":"e0bd8910ce60bc59272f10828715c307389a633221f725069b3dfa78e15b0748","sha512":"e131ef160a2b4867c9fa286f5e33ca157d060550544ee8dc84262c0f6486181a545fc70886085914cca5eaff6d49a30bb1f32d9dc62f7ed9e611f775c1935769","ssdeep":"1536:xlj9ya0n1kMOuQf1r+U1dJofSILCYlyCWbPem2rMUfCexzYdrg:xbRmkV1PZUlyrbPe/jnYlg","tlshash":"4983028c26d8005347056b699af9ca9476ddfbc2b71b138572bd2d3f086208e9b4db73","first_seen":"2026-05-30T00:08:54.170074Z","last_seen":"2026-05-30T00:09:17.222165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/theme.js?=786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/theme.js?=786 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 751\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2148,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (805)","md5":"6951dc811b85a7a2c7e32417c2018334","sha1":"c6ab4e34d9d614271ce2b759cc81798a9c8e3839","sha256":"f914fd9b2c25ae63c13fdb93f533345bec91f775ce6088872829353b3c9b888a","sha512":"5acb0e17ec2ef8df35e1e71d37534d1ee9b6e8e026fc93751ffe1365b875dfdc13f45723ebd19bc5801dd5021ba08462e233b81f2c485f2ce749e88d301a2b87","ssdeep":"","tlshash":"e241e079f710712146afea3d853f63043a27b902d9829008521c95f41fa9a37fee7e58","first_seen":"2024-10-06T09:18:29.996817Z","last_seen":"2026-06-06T18:09:43.545342Z","times_seen":22,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/shortlink.min.js?=1","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/shortlink.min.js?=1 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 655\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2705,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"39675833e734140c4fa67dc43b705a40","sha1":"41b781729a5e66077a201b4528e0c5d569f47ebd","sha256":"b9b10e95377d27a63ac933b94f470b22cef640bbad1452f4b8901ca727c8b5dc","sha512":"9ee4d436b564f312082e0d6eb4630607e2474c28a5a7c71f7b89b7a5324eae4938a72636bcfbc5f37f27a004d02eacd9e44ace5fd5de16bc53bb41c78cdf4196","ssdeep":"","tlshash":"5851898e6f7b71684e33b01846ff4501a6a250c79aacc9407c0c64d0efdf2a8596dee7","first_seen":"2025-07-12T15:24:12.958914Z","last_seen":"2026-06-06T18:09:43.646558Z","times_seen":21,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/bitcoads.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/bitcoads.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:52:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40884\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b7088da71041004544c201828c4dfc0f","sha1":"4b1fb24bd9dec32c36f46c79a989dbc43f1d4970","sha256":"58f8561416c06c3e7077640d41055644fba6bacb6b0a745a2109f2e7a3c79373","sha512":"93256421d249ccbfe0470b87e18a690a6edcef9ab07ed5b64fb82c072a294d3b40133872bbda63eb93647cb686666791f91f026b62571a8fcbc4b7119a5c0294","ssdeep":"768:LrHuoRKAhl0Rk9k0hjxaefZW6kVPSvtqy5M/tsI0jOQOn0RQZ4M7eNA2o8l4x+Qp:LbfThlukq0tZW6kBSVdmKIAOQOn3+4+k","tlshash":"1903f10ec4e91163931b6f927ace4097927e68f61162bb3668167b17fd2f3041b7020a","first_seen":"2026-05-30T00:08:54.172931Z","last_seen":"2026-05-30T00:09:17.147706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/timeago.js/4.0.2/timeago.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/timeago.js/4.0.2/timeago.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 925\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ffc-77b\"\r\nlast-modified: Mon, 04 May 2020 16:17:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2522432\r\nexpires: Thu, 20 May 2027 00:08:24 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmh5r34fxs0InNiMqH8g3kKOYaFQgn4JRpV98RdZhnTA%2FDUq2noqbBtQG8SM7ev2NPVah6vH%2Bdgl0T%2BgBBhtgBuM5MG%2FAsD7L8YjeVp04p9rFKYLHswX%2F%2F9kVYUdNbGCcM4ojJRK\"}]}\r\ncf-ray: a0398110689c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1880)","md5":"f2d4c53400d0a46de704f5a97d6d04fb","sha1":"612bbc85fda1f13b6f0c129d2d8f084d68ff3583","sha256":"b13bab0e2d9eb4b37d0a99d4228082f72e62ca76f6aabfeea3a409ab3a0eee60","sha512":"4950e1d731f937d0a1a1f4a53402b8de570d4bb956cdee834d5c752425c7d539a7a3ed3fd6332975b47c60380351f714acfa75c72139dc6e36185adc33408c56","ssdeep":"","tlshash":"a74186cd3590b86357633f7188af908a6131ae69ac4b8400b654f6d27c72cbd0577ed8","first_seen":"2023-03-13T16:18:12Z","last_seen":"2026-06-07T05:47:05.528578Z","times_seen":65,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 03:05:14 GMT\r\nexpires: Fri, 28 May 2027 03:05:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162190\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-07T08:15:59.989556Z","times_seen":241837,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.2/css/all.css","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v6.1.2/css/all.css HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: a03981105a0a2efa-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T08:09:46.638045Z","times_seen":16208064,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":10,"dns":6,"connect":1,"send":0,"wait":15,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/favicon.ico","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:25.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:25 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 23 Mar 2026 18:31:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1963\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0fa7bdeecaa999a5b99f4c5f0ac36175","sha1":"2283300c40423f214479069b633a6b6c5d0b1b6c","sha256":"c350ba8b8aa0c55756565d23eae2e3ca28cdd0368096e13c7f19d5dd7c5220d9","sha512":"3bc05f48a74d795924364978e509d53c93d269602921fd436078be9bcb8230ea07660e3b1557c4aab5891c2d39993289582f6b08cd76da5c18fc5fc319bca1e3","ssdeep":"48:dqMo32rCDX6DW30K+8CAMUH6EaXMvEKriu5n8JM4DXStbMqMVvmoMu:dqB3nDX6ykK+lAnaEkoVJ4DXSt4qM6u","tlshash":"0591753462d5e488c119d8b3d29e6ccacb22fe32cb7c58af3852bd4de5361e25342513","first_seen":"2026-05-30T00:08:54.17527Z","last_seen":"2026-05-30T00:09:17.170386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/?api=live-users\u0026t=1780099709819","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:29.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /?api=live-users\u0026t=1780099709819 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://clickpayz.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-length: 29\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 00:08:29 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b7e23a031c7f03882a827a03fff219c3","sha1":"2719e6be40ea237ad036b385220ae2d4613b3000","sha256":"566b01c1a27a61b40ace1deedfe50f8f06b9fe8cabee25ad6125561918ad7a52","sha512":"775cd30931be4141c75bc4f142fea8e1868ab132370d54a68a99998948579ca3e3dd1b803dff6236448c572e455159453fea4baea380a31f03c5837e33959021","ssdeep":"","tlshash":"c0700002b200800b08328800a0b82aa22c8080000000020ae0e0008a0a80f0c8000080","first_seen":"2026-05-30T00:08:54.151635Z","last_seen":"2026-05-30T00:09:17.146541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/shortlinks.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/shortlinks.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:52:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24078\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a5169e0231b4104f2f5c161d28961666","sha1":"b94a2b4e8e83a82d63d47207f8245e931c3cef6e","sha256":"e76fe1eac3c10192af13b91663b557c64602ce8242ef4da828595698e924f55f","sha512":"bec139bee31054b8d052212a30e9d27f2ed16d3250dadec5beb2ccac16e7198e516e539c415ca41be1253202c627acd784d627d3986774c38bbdda340eb464da","ssdeep":"384:eNOOmRJnEb8DJTXctKYx33/oQ6XSCSy9jCwfdEZ1I+luqwPS8xq7RdEVpp+Qy4xO:eNO3H/FcPx3Po5ltfdAIeLIkNdEVvVO","tlshash":"c3b2d07bc1e1e69e9cf704f3a321b61b5da29371f5217a10a83b9d8fdf40494e906a06","first_seen":"2026-05-30T00:08:54.176118Z","last_seen":"2026-05-30T00:09:17.116241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.surfe.pro/js/net.js","fqdn":"static.surfe.pro","domain":"surfe.pro","tld":"pro"},"ip":{"addr":"104.21.45.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfe.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 20:05:48 GMT","end":"Thu, 30 Jul 2026 21:04:18 GMT"},"fingerprint":{"sha1":"F2:DA:2B:0D:9D:88:7A:87:C1:C1:40:49:4F:AB:1C:5E:E5:C7:33:F5","sha256":"BB:3C:D5:CA:C1:01:B7:CA:B5:36:AA:B8:8A:41:61:AE:B7:12:39:08:B0:AD:03:25:C7:56:63:4A:B3:D5:B9:2C"}}},"request":{"raw":"GET /js/net.js HTTP/1.1\r\nHost: static.surfe.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 15 Aug 2024 12:00:39 GMT\r\nvary: Accept-Encoding\r\netag: \"66bdede7-1207\"\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\nage: 71735\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtZlmTNhXscZRTxfLfashWTJBQlMsbPtjDabuMHS4VTKR8SMgKhiOnTX2vw798B54DhsM9gzit46OR24QCQTxX86w0y8gQXAyhrU9p8HT2IqUY5M4Qnn22T652SjxRdquIyg\"}]}\r\ncf-ray: a0398110eab1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4615,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4614)","md5":"73fbb63ba6038858cde62021a456ceeb","sha1":"b6f92d924204479130e91b1f7574acd69aeceff5","sha256":"d4440e72c2c1e11a92577da7f30ae8587d51135d063dc39bbff5ff1bd05a45a8","sha512":"de7a96986325158870b204adc09a6f13cd0c618763925a49803615b2e5ab3af4358e735a5ac7356346bd45500b969aec0bddbb0310179321fb6fa8fa7e72fa60","ssdeep":"48:dwIQiTZPduAHo+MGEnePio34Zzkw6VLDMlQs1u2XIbP26z5lPb2SH3Unciz+cCg2:5FI+pnp/HyXIbu6z5tqauCR44RtiNy","tlshash":"a191eaf43b8025f2a6a6c4dc185fc00ebbe6371a395ae0a1d9e5c4453dc02e51267f8f","first_seen":"2024-08-24T19:26:17Z","last_seen":"2026-06-07T03:57:10.236809Z","times_seen":193,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":63,"connect":1,"send":0,"wait":8,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/adsweb/fexapay.ico","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/adsweb/fexapay.ico HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 17 Mar 2026 17:09:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 50832\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50828,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"c49a645d75a07710d52d897e7bafc5d3","sha1":"280cf319344fea13bf3dda667fdc61a4e55b53bb","sha256":"e556afbdbe7e804beef577f538dd1d85450855e0729bb06980eb0590aaf82056","sha512":"8a85cbf454c868337e98482e2a9618bceb821b09cfdf00f78a6f591f343a24945ea502569d19ae2534874e2e599576c19ca7179da4976acfd5341e3a1981fa60","ssdeep":"1536:b72VGqm5fXb3CCp9hCO2YAcjTJKu9zRFEUljTp6z:X0GqsfXb3C3YAvu7jTgz","tlshash":"1933f1e885859184c3eb06d5f5e914d9d063ca0deace4c73fea82511ce4975cbd08e87","first_seen":"2026-05-30T00:08:54.178439Z","last_seen":"2026-05-30T00:09:17.134897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/adsweb/pepepayz.ico","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/adsweb/pepepayz.ico HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 17 Mar 2026 17:25:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40495\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40491,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"17c3dcd32f6a62bd731044371e7ea6f6","sha1":"a4c101f4a4e71953a55546e5f06ba9af992475b0","sha256":"6b24fbe5a777974fd212cb00c9dbcacca18b147400695316d8220f9de4d04023","sha512":"19534665ee2c7127d3c9ad7808e3937ce583832259f3bb6d927db114a88c6bc00a90fc5a67ddfe8c5cc49fc58375925b9ebb53124205797530655c04f34e94e5","ssdeep":"768:thP35nMVhT1G65PJmM7zWK3ZNTR9qoUCNYenkvtmYdBvdgoEP/wCkThd5ryKp9:7UI6GkrPbqoLNYwodBFE/H2ndn","tlshash":"fe03f122924d0151e89f802f320e8254a5153a5d71be7fba4cd2f45eb2e86f57ca3ee4","first_seen":"2026-05-30T00:08:54.179602Z","last_seen":"2026-05-30T00:09:17.187682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trxpayz.com/assets/img/fexapaybanner.gif","fqdn":"trxpayz.com","domain":"trxpayz.com","tld":"com"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trxpayz.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 13:54:58 GMT","end":"Sun, 23 Aug 2026 13:54:57 GMT"},"fingerprint":{"sha1":"95:9E:14:4E:C6:DD:1D:08:55:81:C4:05:4B:35:F6:28:95:A0:AB:35","sha256":"CA:70:6A:57:7D:2F:E1:B4:8E:DD:A2:C8:98:73:CE:4C:56:82:D0:AF:F0:56:52:93:31:D4:6A:F0:CE:7C:C9:B0"}}},"request":{"raw":"GET /assets/img/fexapaybanner.gif HTTP/1.1\r\nHost: trxpayz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 26 Nov 2025 15:53:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 393599\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":393599,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"9b04d77e944c3db256ef1deb928bd942","sha1":"9cd38af86ee718057616b01d4a54ceeeef0e7977","sha256":"f50686c313bb9efefac1a043f6794797f124cc0cc80e12a21a07521a5c9d72ed","sha512":"4c12cbe61af15ef394bf750ae1bd0843b8d503416b3ce97094a20e139f2c3e91170bafd795963d118290909a6c71b36ba6e36702926839635b5aecbc7998e858","ssdeep":"6144:7bQLRdLFZeFhkkHB+05T5gxAiOPDOthKGSmg60XfextgNWZj3JNes/Jg:HyFLece+AK9OythKGfz7gUZ18s/Jg","tlshash":"db84122e850d0a9af42e74b19f7467c94ef5902076604872ef45ef092b0bcce9ca775d","first_seen":"2026-04-01T09:39:01.160677Z","last_seen":"2026-05-30T00:09:17.201272Z","times_seen":4,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":446,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocoinsad.com/ads/show.php?a=260948\u0026b=400194","fqdn":"cryptocoinsad.com","domain":"cryptocoinsad.com","tld":"com"},"ip":{"addr":"104.21.23.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fexapay.com/564565/mycryptoads300.html","date":"2026-05-30T00:08:25.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocoinsad.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Apr 2026 02:11:54 GMT","end":"Thu, 02 Jul 2026 03:10:31 GMT"},"fingerprint":{"sha1":"A3:C8:CD:1D:DE:30:6C:45:8A:7C:00:0A:1C:B9:01:52:CD:90:98:5A","sha256":"DB:30:62:67:B1:18:57:27:5A:5C:8E:9A:F8:D9:BD:53:3A:5D:C9:2E:37:66:F0:CE:75:81:96:9D:42:D5:6B:18"}}},"request":{"raw":"GET /ads/show.php?a=260948\u0026b=400194 HTTP/1.1\r\nHost: cryptocoinsad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fexapay.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 00:08:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: i_283139400194=1; expires=Sat, 30 May 2026 00:18:25 GMT; Max-Age=600; path=/; domain=.cryptocoinsad.com; secure; HttpOnly; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wl5BDwhe7eDUYfGwyDnoRAwihUdj95Nxazz9DZBXetcRNmOgGnAPAP9vOsvIOmUZTI32psUA%2F%2FmCmL8AHxsuOdStwi3NDetOYAUhymwne2cCkBJKO92Usp9YgwUansMxq2tmNg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a0398115885556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2261,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b9f38a33f50f0235bb8388eea56b76f","sha1":"c4e5fc81c2db94d2cee8ca32aec19e3744be201b","sha256":"0db379e13a61e4598e273d73810df1ac89e718d764530bb0ac5b0033edaaf73b","sha512":"20225dcc40fb61ea56bad0e06cfc3e1c1aec6966c74f55f5ad06dc34dc0112b81fd8112bb0137b89aef25544ff4987bb61e1000d9fc6f875ed9dfefceb968d7d","ssdeep":"","tlshash":"66412035c1997552837695a04fb2a319ef225287cb031649baec17831ffe91c8c83eca","first_seen":"2026-05-30T00:08:54.181591Z","last_seen":"2026-05-30T00:08:54.181591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":31,"dns":7,"connect":1,"send":0,"wait":172,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Poppins:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Poppins:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 May 2026 00:08:24 GMT\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13711,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"517ec01fd2c9d5e17413197f22f8ff15","sha1":"3a4b34694f681b54b155c5248851569d0114daa4","sha256":"c6d58ab275d621ab2e952e7b137da0229c2217ab2a92e765864f0aef732627ed","sha512":"e4e86865565bd577c4717d41502cbf98b242d9ab0ce49d5473866fedb7593c88648c55b22d44254179eb174c761e36bcb4f55705ed843db43b26b156da244715","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGMXr3lVwa3RzJZ:vXuM0p2+T","tlshash":"e152ce92002be400ab871dc223cf7e3abe8e50896485d1796ffd0cc99cebd66436576d","first_seen":"2025-10-20T03:03:08.477875Z","last_seen":"2026-05-30T05:12:01.476296Z","times_seen":12,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":308,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/support.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/support.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:53:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30766\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5c3c8ef28b2e5bbe60ecb60392b5c4f6","sha1":"cb9c58cf91b3fca4bbb393be57ed28f3fe5f5c33","sha256":"3cbb33329c750f1229416c57162e9f0a73d5be57aea4515799a87373ff64ac58","sha512":"84995d6a586643824f18b13279f50c387d8e69bb26b78860ab8c0199152e3861abdf8924b3fbafbd22dbbe08d36fd3330a721b9ed68e46ee3055adadde142724","ssdeep":"768:8KJrP4mIhGV6QfI3dqseWD/0+AqvTb+hxp5FeL6rGFlbMq:8MPc46QQNqsBRzvTAxTELaGFlbMq","tlshash":"4dd2e16659cdeb72a024759af75cc32987b736d801d35c4983a4e077c6fc9206ee0963","first_seen":"2024-08-20T14:12:55.221545Z","last_seen":"2026-05-30T00:09:17.174556Z","times_seen":13,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/adsweb/trxpayz.ico","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/adsweb/trxpayz.ico HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 17 Mar 2026 17:25:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 74777\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":198129,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"fd5cbd8aa68570f7c521428a05ea3f89","sha1":"2f4842459604562f30309f7d268096dc366d5467","sha256":"9ec6c52d427a975667922289acd20d072e17b8bd1eda3ffaaf8e2cb28167afc3","sha512":"9c9c14351c1574aceabf0c19c076dbd747e8c148d9f336ff6c6e1f12d5ce7c58053ac240331f357732efd2c75ea824c09ddd16d72cadc5e026614e1ad92d4b1d","ssdeep":"6144:anXugRjdscwDC06LEd6hrKbg8N++vpFYdo19a4OoKWjUy9uLmaxTdWNpsn6jHBTq:DgRr3","tlshash":"2314b6aaeabd802ece1127747d85ef8089f47c44387dca6f1b6138d8577bbc26894d05","first_seen":"2026-05-30T00:08:54.184334Z","last_seen":"2026-05-30T00:09:17.224695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":906,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/adsweb/usdtpayz.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/adsweb/usdtpayz.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 17 Mar 2026 17:25:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 99882\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"f6c3d65339b45d2765828077cb7f2745","sha1":"2da7011c0d2ff66251cbf77de767f91a78165b01","sha256":"5ba062ebc4a260887442c4425a3dd555fe002cef942a6fa97c93244733f80f3f","sha512":"61e2b4b920d8982c33a747a083e3d46767f0100d8f8f014d3b50d2386897ac7f44795187b9eab0b8ac318e2b5056bae5eee509bf74f8e7ae8f1968bfb9342be2","ssdeep":"3072:8rm2/AuqDIGpNdSswBLvg56h2LRZr4RNx7V0:o2IGpqswBDgS2ARXi","tlshash":"b0a312a6bdc7e3c3990f970c36f0f4134196211005cc6fe294ce85db479aca4eae62b6","first_seen":"2026-05-30T00:08:54.185268Z","last_seen":"2026-05-30T00:09:17.213707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":947,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":53,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/advertise.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/advertise.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:52:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31008\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2f19f721d3d87da8beba32f937bcb1f0","sha1":"06a454ac18283cca7190fa466f92c0975219ed60","sha256":"6b46fc1f187f6fa4a04cdb11f02b694660ae0a1b32ddb25a2c27d9a2eb0bd3f1","sha512":"d899514e1dd8a46a572e9042f115dd2c76ffe793ddf0241f8e21b03d7cba495ade167bb7ea709a7c1c289b1d4ccfbd9399f27ef464cbb6b119e0a6a9aa7db0d6","ssdeep":"768:TeWvQzokv46f2Wt1fJaWQBKLbsq5cmmS09UzpSbOo5:aWI8kvR7RJ+0cmmF9UzXo5","tlshash":"b1d2e01782f1d22eac43533a6adc1f87c5b363246359d0c3daec899ebe21d93980cd65","first_seen":"2025-12-01T03:04:32.318276Z","last_seen":"2026-05-30T00:09:17.133327Z","times_seen":3,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T00:08:23.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: SEASON-ID=37b896435cc06780830ab9745cfbd679; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"timeago","description":"Timeago is a jQuery plugin that makes it easy to support automatically updating fuzzy timestamps.","website":"https://timeago.yarp.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":177269,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"05de821a0a25847d6484b78afe038a99","sha1":"ffcbf0a89939606014aabe10c24b8ab0ce8de9f9","sha256":"ac0ec6209e36a65354320a5ffc148410f5d63b61857f5c499b4e5749ac6c0715","sha512":"172da3a41f0ad36c8eaf6d3c03fa69eeeb0ebc5f6338abf2942ff9cb621fdab4224488257298a86ad2750a43508fac4dfa395ace8e31dd438a0f7dd59cc36dfc","ssdeep":"1536:oj0zcJU20npN/AfsgBErKbWeyutnW8hI36MGDR36OmgMLic121d32J4PH:VUXnhhIPLN121kJ6H","tlshash":"d5049565e5f324523013c4d477a2bfaa7fa8c107c60ac97837ed17b48f8aea5981764c","first_seen":"2026-05-30T00:08:54.187278Z","last_seen":"2026-05-30T00:08:54.187278Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1115,"timings":{"blocked":210,"dns":146,"connect":34,"send":0,"wait":692,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/css/custom.css?=00786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/css/custom.css?=00786 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 16:29:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1992\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11182,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"e60aadae69bde73c4db43844bb6a9220","sha1":"82a7f01e4013db72fac76cf47f42e905f8a8f706","sha256":"2e1efc662d14f052334d143c6665c435faeb85e4f5db12346c13b15f5f1a23e1","sha512":"ae8b5654defa71d61aea13ecf5f640c85f5136f7ecb623999dabd876553ba675bf3b15937b74d4e4e29dfc205a5b2f6d0699ab268722922eaec60289a41a99d5","ssdeep":"96:MQaEIO1aYjAiLZxZEVq5E00SsBRUmWaWn4q3pjTG4FEYKj5r3QEZV6C/aMF7FR:fVZDZEVq5wSsUmWaWnR04FsJyMF7FR","tlshash":"4232aa11f9e1d1b73817526c625af67d3f7db4858a0a8f7a7fa431286bc23e700b2950","first_seen":"2026-05-30T00:08:54.188193Z","last_seen":"2026-05-30T00:09:17.211288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 01:46:26 GMT\r\nexpires: Fri, 28 May 2027 01:46:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 166918\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-07T08:13:33.228204Z","times_seen":205645,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":144,"dns":1,"connect":16,"send":0,"wait":18,"receive":23,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 24 May 2026 10:06:53 GMT\r\nexpires: Mon, 24 May 2027 10:06:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 482491\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-07T08:15:59.928321Z","times_seen":258225,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1892731\r\nexpires: Thu, 20 May 2027 00:08:24 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhvlF11C7vdiymYOVU%2BfteR0IpdRUnqT4I72e2pappnJv4XFmyMm3AJcPtEzbtViCxCnguHxRmev0Bk6hBg%2BUi2w66Qjeft%2F0FB285Okn45zYCO6s9DvYpNNXGQNQarY0PbGt812\"}]}\r\ncf-ray: a0398110689b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-07T07:29:26.986563Z","times_seen":29187,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":7,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/ptc.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/ptc.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:28:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32010\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b2ab793716bc8f9c56ff020d299a8a12","sha1":"0369adc2ef8d429cd9b7ef9b0de03de12ae48758","sha256":"197caab192f6de178703dbed1144a8beda5ef676501fc3df8bf0f2579e04335b","sha512":"c51c7734940d04715955d08bd015b47ec9c2e05235fbd8a8545c233e21b073cb84188b186b9cddce2fbcb489b13dff76e4d177647220e90972c6da34c48ed47f","ssdeep":"768:HE+53+sZyrM6Typof/3lFMI/SRM9LvZBXN+iqBC4wXJhXk:H13WrM6KI3lFF/XRvTXNNq4Xk","tlshash":"a4e2e167d334c640cf2be56eb908af137d4f293ea1e6c14cc691686e8181cd8d986b96","first_seen":"2026-05-30T00:08:54.190169Z","last_seen":"2026-05-30T00:09:17.173587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/icons/faucet.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /icons/faucet.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Nov 2025 10:52:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26960\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2a740056a7f9137e4a9758563ad622a6","sha1":"2152874f447441bdf2a5ed6ca73fe11f673ab75a","sha256":"b63d0be5710c2e33f3b21b0231700c5fee19d39cdd58fb344131a5cd1ef0a5cb","sha512":"d16a763b6742387d821b70eb70905f2af1e981f8885a38a57ce14d6ce65dbce6fc1fa3cec18340b976bcff81a165e601999da8f32f48310b840b38a2ca760f9d","ssdeep":"768:NV+KXWouv4yITzipkVFDCcY0u2KyWOS3u5q:NVHkBpkVdCcY0u2KyWOsv","tlshash":"2cc2d0530864c7594d6f25bdd5620f07a2ff68cce0c8cbd8ea7d234d6065fa8232e589","first_seen":"2026-05-30T00:08:54.191064Z","last_seen":"2026-05-30T00:09:17.125318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/img/adsweb/tarapayz.png","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/img/adsweb/tarapayz.png HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 06 Jun 2026 00:08:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 17 Mar 2026 17:25:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 86047\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e6e1a2f9e70e6fc203113fa441ce6989","sha1":"7faf506d1ac7e550fe85dfad94dd5e168dbafbc2","sha256":"cdc66d13e641cdc4888b04d4ecf0531879a767fe1a888f3b8e4e394c2653f060","sha512":"2133fcf8e3a00d0a604740e027f3ea31004aa849134953b38fbb23af046208913004c2024453cecb542cb7b5706ed0762a0ade1e508e9065cd30b18e95720118","ssdeep":"1536:Fl9twCtaSAUPNMZHvjUWIg5/rCXK262UKm6/x5GOQURMiHjvg+9kjA97HcSYDHAv:fvtyL3IgU626gJ/x5vQUR1GjAxHcfDgv","tlshash":"f28302722808b697fd9bcb472ca875134ac3f501482eeb866fcd7e56f1275a342bd016","first_seen":"2026-05-30T00:08:54.192146Z","last_seen":"2026-05-30T00:09:17.13896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clickpayz.site/assets/js/login.min.js?=786","fqdn":"clickpayz.site","domain":"clickpayz.site","tld":"site"},"ip":{"addr":"62.171.149.154","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpayz.site","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 07:54:42 GMT","end":"Fri, 21 Aug 2026 07:54:41 GMT"},"fingerprint":{"sha1":"2B:8F:67:F9:1A:51:CE:40:8C:2E:AE:47:7B:A1:72:90:29:39:95:E2","sha256":"CA:92:51:C6:E1:FA:05:3B:EE:41:14:B2:59:F6:80:C7:B2:D6:AD:AC:DE:42:ED:39:FD:00:99:10:F9:52:20:A1"}}},"request":{"raw":"GET /assets/js/login.min.js?=786 HTTP/1.1\r\nHost: clickpayz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clickpayz.site/\r\nCookie: SEASON-ID=37b896435cc06780830ab9745cfbd679\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 04 Jan 2025 06:05:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 412\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2300,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c4de3309a920767ad178cc4b79bb4639","sha1":"2ddabca8fa1ebfad02fef89f8c5f26d64d40dbea","sha256":"6c20c97438762a6c2f34eaeb2522699a13460ea95f30e10629cb557c90208587","sha512":"c2a505f030102f7d4b7b100c880e178ae59d8599de972a6c789df4fb321f1b7ea719dda7fd06f814d2e261fab88015885bdeedcd5effa000b304aadf8ccefbe9","ssdeep":"","tlshash":"e341c08db7ae26b64a73b27c13af40017f3960231509fd443a1c60cc5f9e26c685af76","first_seen":"2024-10-06T09:18:30.353253Z","last_seen":"2026-06-02T23:38:55.241528Z","times_seen":19,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"clickpayz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 May 2026 00:08:24 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1227013\r\nexpires: Thu, 20 May 2027 00:08:24 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VP%2B2Zp3rtgoce%2Bh7%2F%2FiUBiAHHYKBjgYSG7AZjQv2T7CQ%2BEljq1YLmBfUdOTI8bO0Bz4ZENGN0NQw9Sfu62vQDaMqdeJQC%2FaOf9b%2BkyEfgz%2FkjZi2RYLP12buQy5nKcAzETv9Il1k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a03981132e2656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-07T08:10:57.870504Z","times_seen":42310,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":33,"dns":1,"connect":0,"send":0,"wait":13,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clickpayz.site/","date":"2026-05-30T00:08:24.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clickpayz.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 02:56:53 GMT\r\nexpires: Fri, 28 May 2027 02:56:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 162691\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-07T08:12:08.119233Z","times_seen":352868,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}