{"report_id":"37f0d6d0-b02e-4f26-baf0-f9e330f96d75","version":6,"status":"done","tags":[],"date":"2026-04-11T18:33:18Z","url":{"schema":"http","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.55.120","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"title":"Home - PAY-SWIFT","dom":{"size":49535,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (477)","md5":"eb41b327bc4b5a825bdf7b4ed2ea1c3a","sha1":"ff5d8bad856476c217657977c747a7a7821e992f","sha256":"a345512e947b7c05adfae0e9b0b98e4f6e6763244fae99bfff536b5647936a8c","sha512":"7fb1dfad1007f4a839f8f2e3bb87f650753a6adfbd8d7c98f3463aaf37a94670cf81de44406af13eebe1915a13e650e2816a5bf4965744fa0db90196e5ccc67d","ssdeep":"768:DNB6LlIttsPqnjgTSkG5MH4XL6oANXPNJ+1UN4M:CYsPqn0SFYu6oANXPNJ+1UN4M","tlshash":"a323623294e81437021342c53961370daaab9c37da2fc991b6ff8b586fd3c85ed0325a","dom_hash":"domhash7cb25fddd0b560238cad166cac572fa6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"77.37.55.120","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-16T18:33:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":4,"received_data":204604,"sent_data":2144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-05T22:35:26.697622Z","alert_count":0,"request_count":1,"received_data":111574,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-05T23:05:20.049371Z","alert_count":0,"request_count":1,"received_data":90255,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"pay-swift.com","ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"domain_registered":"2023-12-23","domain_rank":0,"first_seen":"2025-09-22T07:38:23.397352Z","last_seen":"2026-03-11T03:00:54.787013Z","alert_count":104,"request_count":52,"received_data":3323727,"sent_data":25926,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.21.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-04-09T04:03:53.786716Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":519,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-04-09T04:03:53.715073Z","alert_count":0,"request_count":1,"received_data":18549,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":33604,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pay-swift.com/front/js/appear.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","size":4228,"data":"","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-04-11T21:00:00.321394Z","times_seen":4396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"58d33c0a30d3a9a832064299878367c4","sha1":"b12358719996bea9d513a324e6da69d602db9e30","sha256":"e6f20629d9edda2dcf6761920e4932bc9ec299ec4df53994a76d10f8ee6cfafd","sha512":"34bbf17ca74382bcbe022200ffd46c129f60b0984603ccd021fd7b44186ce126e30f41f09a1793c0a5b9512212a2dbc7a21b08e0a149114933130617e7cfe87c","ssdeep":"","tlshash":"9111bccd389ba0a05cf672ba1f2fc047be325593404d0485b90c0a58ffd1478476ef14","size":899,"data":"","first_seen":"2023-10-19T15:47:51Z","last_seen":"2026-04-11T18:33:23.10298Z","times_seen":462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-04-11T21:31:32.633656Z","times_seen":3535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-11T20:50:22.584133Z","times_seen":68476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/wow.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","size":6299,"data":"","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-04-11T21:00:00.296136Z","times_seen":3166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-04-11T20:05:38.519059Z","times_seen":28000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/owl.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","size":85303,"data":"","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-04-11T18:33:23.075533Z","times_seen":3866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d46215a0163cfe94bea859f0388498","sha1":"33ae12e56db92a9c56c5010bbcbb6232da01e03e","sha256":"ff2b3de37561f15cb21be947ada96121bd27f6e6f35bd2d7e32c70ebd899b49b","sha512":"bc9cc18bbbdf26f7a15f1916436cf86bd8f519e317626820472b97f176d577ccf7df0aceec6b580f8b09ab6e3973380a4f86b4f97a0774ac055e186ed766504f","ssdeep":"","tlshash":"59f04c1db6641d394ae7943c2d1ad8013ce80c408e08bb85f8f860574fb0e2526ecaf9","size":606,"data":"","first_seen":"2023-03-08T11:42:11Z","last_seen":"2026-04-11T18:33:23.103836Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/script.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e35777a87a72bcee5772e044ceb1893","sha1":"b536cf78e7a555ce5f6fdb035edd03969b482786","sha256":"f0fb3769cc69d61957b52c434ccace34582e351c33d877348ad09df1faf925c8","sha512":"129b8f5749355535f047d7ace778a5c53c170f970cd77d636d527b49beb0b69198b0e15f0adfa38a8c10fb9741f74264d8d1574c252c8950ce7039d0def2edb0","ssdeep":"192:AAbwxe1SS9yKONEaSMAqLUvWL/I7DylG5bBWZ7rDHdjezUVq:39ZELUvZyyUZbdqw4","tlshash":"66227390ff7c15a2007b7059a69e75c0abac4027c94294b7f8bd056d2fc436e64eeb5c","size":10744,"data":"","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.025762Z","times_seen":1612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.fancybox.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"217c1667b830e818ad4e170c25d5222f","sha1":"e4baa41f4d86be0dc1b127a5d6d8901263216e10","sha256":"b52a13e34a3c8009c820a585a20add686c108104297527ba38f9c34e15d633c3","sha512":"3ae977c03fe17e1df2efc236e66fe3eb2021889b0a7921d5352330456936026ad7f50fb650a8c4efbfe0d9a21dc1c8582f3c4eb964496ae31d0a858924d5b928","ssdeep":"1536:B6Oq9WK+zQTwkt3CGmG4Pww3FS10RMo4RzP69XkVJG5ldYgbGg/06OXQeUg:BSPw0SGmGgw1b69UK5XbGg/06OXQeUg","tlshash":"41e3844a16f211218d27757e9bcf701ab67a8013a50cee213cad83885fc577942f5fea","size":146244,"data":"","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.059226Z","times_seen":1608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/bootstrap.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","size":62411,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-04-11T18:33:23.058365Z","times_seen":2312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/validate.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a7fe67021f7028791330511820da17","sha1":"1716002d22dfde1c0855ad504b527864896022b7","sha256":"79e8230fcd2cc9b5362a68960c2734d6c929e52465861d47b5caa03efc1a66d2","sha512":"a13477f6164fef8cb455c1f4c29c18d498008a6aafa06409dd6da2dff8fd73c7576c4b188d58e0ab3f73c1c50a2539126b1f24c476d8518a9c58a1294e07617f","ssdeep":"384:Qt+KEKCnU0pMEdMAUZh/VL06g9B4gny+mz4CebUC3mIqNF5AzUjvNTqbrWV6r+Zm:TKCnU0XdMAUNLTwKgny+yxFMUjcz+Zm","tlshash":"3e92ba4c76c1a0575b9620f5a40b550bb1f39ab8600de02cb5bcd4e2bee4f856167fbc","size":20886,"data":"","first_seen":"2023-04-07T05:25:29Z","last_seen":"2026-04-11T18:33:23.05023Z","times_seen":1847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery-ui.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bedc12dcfee87eeec2fab0eacc4282","sha1":"a9209013b11229858c017d6fbd1ba4320a0e8b61","sha256":"73b6f5a1857f503b293bd34466cf196cc7dc8f340ce397ebc9b2a3d19b12208c","sha512":"f0786f6685be36425fef0dd42311b99f7c230942c3159b709acb6de2de57c958e28954559c87b972cc0054a724be63cfb20ed0ea80396acf68c8022179c715cf","ssdeep":"12288:1femHFgymz6DdHCcmMm/W/CCeS/QRzbrVDDdRO2:/DdHCcmMm/W/CCeSIVDDdRO2","tlshash":"58b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","size":520717,"data":"","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-04-11T18:33:23.063926Z","times_seen":1906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"62cff7a4995b5ed02add5568644de082","sha1":"daeb58048ba577baa5ae5426dfcb11608159aab5","sha256":"70e6647b8d2a1d021f63f80755e29f19134204d9a937c7701f6f9c6fee74a4b1","sha512":"4206d8a4d3ea02653452be7537b3f56ce69fe4866cb6285d85a20875f8d46f8e4b1a72acc75e13216c9326db235df01fb67b8c28c85bb593e93715cf04fb56d8","ssdeep":"","tlshash":"c3e0ab7c3c34419047a251b4c0b7e1383d0a30700444d90794aacd3928f0bcaad12a94","size":418,"data":"","first_seen":"2025-09-22T07:38:29.567725Z","last_seen":"2026-04-11T18:33:23.105241Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/popper.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"0269e72ea643261447a59e685750b1cf","sha1":"89e76a70f48a2dcb5359a5b6a57badbf77cc5239","sha256":"18b80e40bb93ae5f8f1d3253b03d8e5d55b51341a27ed78cf42feadd012bcf9f","sha512":"ef203f77bf722211cfbdcad2881f12ffb4f25f43b195c714f05fe4b81f261d88cb945d4c2273db128869a2a7f3d0020ba2ae61a03ee510b6406181dbc9e1236a","ssdeep":"384:PvFHekJviNIGNi7wAjvOg/+f3+d/m5HfxoULOw/VoNnuGb/f/MgHknmjNzWN6j3Y:RBTjvZ/+msXyw9oNnuSf/MgEnmjNzWNb","tlshash":"8482a68c7a94f4a5166753b6807f550fb333a520218fb500b254d6da2c74eaba32fd3e","size":18362,"data":"","first_seen":"2023-03-07T12:22:43Z","last_seen":"2026-04-11T18:33:23.049409Z","times_seen":2107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-04-11T21:27:11.218938Z","times_seen":571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pay-swift.com/front/images/resource/news-3.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/resource/news-3.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16812\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8a874720d20daea354c92e4e219239c5-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.012\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":16812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df4a9907e48589945d830c881296ba4e","sha1":"a81bb4ca2b323afe367073a1e58f0a90ad7451de","sha256":"06d06114c9b1af72bc37391a9583c2db83eebc4e5e9722db2efcf7ac7ec20ae5","sha512":"99713bf6760df3bb71b966707a976869dac0a8523a35ff76a85ef5e26b2eaab2a1bc623f32cef84f55844f30a765ba931aabd70100cb081b062fef7803387797","ssdeep":"384:QeXNa9J/zY2YXcJBLx9sCldyFcTBN5ZcC4YUvg1yNux7ffQ:/XNKJ028cJBLx9sCldpN5ZcCtUdNuxzo","tlshash":"ed72e06b29c1087ee11d41fb0873caf61be403c2f4451a1988c642b8da7be6d7479ba4","first_seen":"2026-04-11T18:33:23.024054Z","last_seen":"2026-04-11T18:33:23.024054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1467,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/script.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/script.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2565\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"29f8-69b792d5-828fbe2e58bbd3c9;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: aa6249691b64184549cb85f528762cf5-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.809\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":10744,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"2e35777a87a72bcee5772e044ceb1893","sha1":"b536cf78e7a555ce5f6fdb035edd03969b482786","sha256":"f0fb3769cc69d61957b52c434ccace34582e351c33d877348ad09df1faf925c8","sha512":"129b8f5749355535f047d7ace778a5c53c170f970cd77d636d527b49beb0b69198b0e15f0adfa38a8c10fb9741f74264d8d1574c252c8950ce7039d0def2edb0","ssdeep":"192:AAbwxe1SS9yKONEaSMAqLUvWL/I7DylG5bBWZ7rDHdjezUVq:39ZELUvZyyUZbdqw4","tlshash":"66227390ff7c15a2007b7059a69e75c0abac4027c94294b7f8bd056d2fc436e64eeb5c","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.025762Z","times_seen":1612,"resource_available":true,"data":null}},"time_used":1383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1246,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/elegenticon.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/elegenticon.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 4189\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"63c8-69b792d4-74b0f95a5e3c2737;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 220fe1002fc4753512b6a744c47ed627-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.781\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":25544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ff2aec2ac74d1d10d260da41250638b","sha1":"9cefb332dc7c7b610d9a62a02d89d261b7c23c27","sha256":"a982c5727d6726a230f1f288b0f67c0811eabbceb902e40f87384da02eec91d7","sha512":"f3620083d24449cb440ee4c58e298f3f31c18cf7d315b05474141d418bf75dc7f141ff9ceee0eea621a04989188df9ad26b16ca10348bb6e573dcd4c056a30bc","ssdeep":"384:DDKGaQZNxtAWkx6qFuTZOpLRb1JhO2SdJbrTubeqTu7fIqTfXshW6EciwK8F6p:cWkxXNRuu6qTsshWIzF6p","tlshash":"30b242e09dfc68855721d8c162166370ef0da3398e9f6d0ae263788ca3e1652d5d77cc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.026777Z","times_seen":1531,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/main-slider/a.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/main-slider/a.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20090\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fb078a6b9e2e0b7fd94edea934a4d6eb-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.340\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":20090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"afdb519b1d91f3fdafd810a1860f4bb0","sha1":"7a43a143e5f7858c135cbb5b648579cd510e52de","sha256":"48a580a7d754a5ab4a1e0d31f8d12937f5bc4f10b0caf352ec005bd92065fb42","sha512":"c38d37f6802eaee406927c5633a403ba4a64060705167eee313c2bfe809de1cbc1591fa1d74c86be44a3875d6f520337e300b9dee54fe768b46d15f1d4b93c97","ssdeep":"384:QZ3incIzK5Iktj/2IwywWV45i1SgSBnIyf0RmBE4SHV1XWW:QQncIzK5rtDLwQuminF0Ra6n3","tlshash":"7292d1de4b5b3cd8e05d70300589abab422bc4c91f1b4a143eb4ee1b7db6566b10bdd2","first_seen":"2026-04-11T18:33:23.027825Z","last_seen":"2026-04-11T18:33:23.027825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1517,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/8726e6e139cb946202390fd707658e1cb5924b3f.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.21.76","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:33:00.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/8726e6e139cb946202390fd707658e1cb5924b3f.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-04-11T18:33:23.029283Z","times_seen":2493,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":100,"dns":11,"connect":21,"send":0,"wait":23,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/main.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/main.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 11416\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"18d22-69b792d4-a93dd23607104067;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f660312fa00354f61eedc1be49f89537-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.724\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":101666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbc47cffc3d32605f01a227ed790023e","sha1":"a463258b408559fef4bbe718824d6669e5f9dee0","sha256":"dc10e64c8f9318269786adda86cc11c5d381a95e24d2b1d51c7b88e6ddb85648","sha512":"bbe592ad95089dff2531f36b43892641863ee41700fca0203d15242b2ecef30f8032be5f2b63b7c3b412ab1f145a6a71729ba17b937ce5439d73ff25c3d35d7e","ssdeep":"1536:K5z50jif15WnN8e3Mcn+UmvE3bHgZqmgNa38e3MPnpJVwDdZaycVIUJRGaAvttrV:K8W3zy2t","tlshash":"42a3fdde42312500742b97ad36c3676a673ca182f93bc46c77d26528de8a79d1133f8b","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.0301Z","times_seen":1345,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1207,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/3.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/gallery/3.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38746\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5f97f60dcf5547916a6d4b9e77c15a29-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.355\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":38746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e32ccbb2d3ca9753e7849a0c270b3f6e","sha1":"a81bbb4d384c8632518b78268c076c4cd5d563db","sha256":"27d9d755687558e3a2c6ce088f68b9950897a9a6626b64b23ed69061f3f67cf7","sha512":"229184fdcbd92d8591f27a4e85783ac20697b6f081f94152cb2382a57ecfa58101306221b2f445bfbf84b0598ce5f9903bdbf2d27c9063fd724ac6d278ae6826","ssdeep":"768:ANLXDh4f7u+ghug8QnqyTsY6g217mkpOesEXuPXEGVrJrWMOC6309:6TGT3ghPtDsXg217lOesWuvJNWMOQ","tlshash":"8603f2bc9f6f0a74abb4ac7c8c1742561c4ee09031e4429b313ac85ceedf4e98c74965","first_seen":"2026-04-11T18:33:23.030812Z","last_seen":"2026-04-11T18:33:23.030812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1717,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/appear.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/appear.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1217\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:57 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"1084-69b792d5-52b3659e0789d9b6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fbf80045e0d12264c202f140513801d8-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.549\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4228,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"cbbd68c06c9cdb2481b7050f6e64375e","sha1":"1ee3d2e29b6279f1986cd878072780d596250878","sha256":"4aded4f99d9aa82ccf099bfc6ddb735e25a6de44a124791c1e258cd05daee11c","sha512":"4de42f78a6ab93d9dce738e73c7dd889e7ffeea3dc01f8e09055b6eab195d1a759fbc502ecadeeeead6ec9be7fdcdededd440e154ee7e9742d77ff1a2fd48fac","ssdeep":"48:Yo3dwd2k3yV5egTkYRSdaMxlehOBOrMR6nZNBFxDNE9l92bA4FS4flyu:X3/skfRwbDOrdfFjg/2cmVflyu","tlshash":"48910e0a79eb1ab54877713e8fafa2442231503b2202d8113ceddf6c6fa1c64a597fd4","first_seen":"2023-03-07T12:11:58Z","last_seen":"2026-04-11T21:00:00.321394Z","times_seen":4396,"resource_available":true,"data":null}},"time_used":989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":989,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/admin/assets/images/logo/pay-swift-home.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /admin/assets/images/logo/pay-swift-home.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9506\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: eec5e7d14ec1febe49cccf256e75e38e-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.079\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9506,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea814bc6cd2eb5fc770030108ccebfd3","sha1":"a2884c45d1ea667724a769c7e2c64477a7cf40af","sha256":"277f4974502f1f3f811afb24db82cdf71cb0809073c4dafa748310329c8b7aa9","sha512":"14f7ec6d771e46bd23be0be153203920a158d9c2b8776f4c363e7fadb5325bd177fb2363dec2758a1e665c59c35b8d8961fa7b5861631a3845585a942fc63970","ssdeep":"192:D6Q1xlsBG0ksw4l07rpN+McbGUzCup7dBtl/jU6TtJiBpP5BA2+jXom/uIhLNCvD:DDYXw4lArpN9cbGUzCM7jU4aBphJ6Ym6","tlshash":"7812b075a2230927f82e0e741d7e3eb756dd2446e8c5a899f12a632d5c0c4e4fdd052d","first_seen":"2026-04-11T18:33:23.032777Z","last_seen":"2026-04-11T18:33:23.032777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1480,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/1.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/gallery/1.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130136\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5607699c69a4ce741d98bec456c0bf7e-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.782\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":130136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec9745f5b7c4c29fe90d6ffc349f9776","sha1":"5e56226d1aaa3479b30aa1ce2c340cfb19e4f984","sha256":"2717265450f78085ef57b66e41ff39955eca776bdf18d88e36802241dad1c782","sha512":"38efa96ecaa124c85c0c811c8f784a0493a67c40d681d76f07551b71e686e1a3f18e2b1fda04ecf0b25039277a5a76b90ab356fcc79c7142378cbe131109ae02","ssdeep":"3072:z+q4pe+JZWXGkqX8VD2xo/y9Mpexy9Fs9j2M9GEo5cwoBwiwLxAw:iVQ+fWXIY2H9MXM95o5NooLxAw","tlshash":"e3d3129ac3d4d2a7e4dcdefe942c4e733a90f9a21c97a0fe57f605c16d428349948838","first_seen":"2026-04-11T18:33:23.034078Z","last_seen":"2026-04-11T18:33:23.034078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2143,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/4.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/clients/4.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2156\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ce5a0d482a444fef5d16b5b83ab072f0-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.568\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cf2bdb034eba0b767a6cc6891a1e997","sha1":"d23f4eae4bc75d1fcaa97c744c124645ab140035","sha256":"4be4ca4b05178cb0ab755f169b9fca40547ee91dc752a5a51c605af10ad874ba","sha512":"549846f47b24a0c34bfcb0cbbe625f87defe5df4cde8a27c873d4326ab660d56fdd68ea342fa582c98a1491604deee77b7b1ef3e248f4b55c9f30d5566c12e83","ssdeep":"","tlshash":"fd411a06f6f82cc0f069727458394bd280f9f1e01a77f3391231a545ad92b1bac45dc4","first_seen":"2026-04-11T18:33:23.035711Z","last_seen":"2026-04-11T18:33:23.035711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/5.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/clients/5.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3526\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1a0882f45ef54b42dad17233992085e5-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.769\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cbc2fca002f18f4b1b3b7156d76e68a","sha1":"8ecefafcb306a368bf9284f1322ea0290b994a7e","sha256":"af110c74c72577edce40d8985cf55d34018614b6a794d1521205c4979b2f9cb8","sha512":"028d85efd0aabee9ee6839e5bac3b5fb267938743a111c2094a6b7e608de67a711132674bac9c9a07f71a585300b262f87ef67d30d17d0bed60405f8d7834441","ssdeep":"","tlshash":"fa716c175d798237f06803f92d39338b4990335a35d4171aba8b8e07eeb59d6bee4c06","first_seen":"2025-10-16T06:49:21.110786Z","last_seen":"2026-04-11T18:33:23.036976Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1214,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/resource/news-1.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/resource/news-1.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 63094\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ed9b4e01a8669dd242b5927132cdc696-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.480\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":63094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc2192e4419eafabfab668418d0dce5d","sha1":"467f343ca308a517bd45081b81fb94ee6f6cbf29","sha256":"c3e3e284e6d856913865d66d9a9ec3d08592f5565400295c6781cd4f72d79524","sha512":"1a74635272534d1ee2ec017359811c2c0d0e29b65f1044a270bfd365c0d71561b71ae48574f7f4d3fc95c9e3b59291636cac2d2461fb9bb44e36806f752b738e","ssdeep":"1536:yzHNLDhypv1JaqOlgXJHhJWdlNTyt4WQI6/hmLG:yzdhy/8qmgLuqchm6","tlshash":"c45312dd84e05364522c467b759af4a53027f5142b19f9221cb367360fdcb488bbbbca","first_seen":"2026-04-11T18:33:23.038456Z","last_seen":"2026-04-11T18:33:23.038456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1837,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/wow.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/wow.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2023\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"189b-69b792d5-b8ddd3ccbd1c4572;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7495d683fd5a73a403a6f27e8c8e6227-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.710\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6299,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6269)","md5":"105fb3799fcf14f1ea8fcff23f2686dc","sha1":"00a8a01378a8259b38cba29dc69ddf761450053f","sha256":"704ae255ab62df5481884eb0db69b552c686e7094b21581b1cbc86a9b6c3800b","sha512":"ebdee19d8c8ab3f2d751c753ccad4a0631c1a1520821682dbcc8d9555a42d48ef9d67e333c2b9854e3452f783e5b37ecac686e287fa0f9d2ce6ce42168e87ba7","ssdeep":"96:gGqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:N30suCYOVEE7ne4JqgpIwdh","tlshash":"e1d175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f3c","first_seen":"2023-03-07T01:38:15Z","last_seen":"2026-04-11T21:00:00.296136Z","times_seen":3166,"resource_available":true,"data":null}},"time_used":1293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1182,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/simple-line-icons.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/simple-line-icons.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 2529\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"32a8-69b792d4-3e1d5e03daf1882e;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 490b97ec4a0a2d0d82af7ba2c67506d8-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.555\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12968,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b59f8965dfca3963a8ac681b859aaa05","sha1":"a8bf6b10fc99c4de59e0977c1232b5fdcf9c443a","sha256":"c440ab5fef47b932087fe156a3b715a0033607533f9f7a4553b0e8612fa2ae0a","sha512":"89cbcecdb4eccc94322132c3964f4fee9e7dbfd2e90fe7a54032f329a0b536da4cae3dbb6890398acdaf088ece738c8439557f883a3e8f61f508b44be6eb0b19","ssdeep":"96:4jj9ryhGNBj2HtkmHaTdmVCOrMBv20tJSyxdSB4HIHWGkTgU0r6v8pZc35:4jjA6Bj2HGXTm0l2UJndZHokcU0VE","tlshash":"a4424fe49dbc19801721e4d162466620ef18a3298dcf6c1bf2a3788ca7f2b11d4d3bdc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.040536Z","times_seen":1522,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-11T18:32:55.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.34\r\nset-cookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8703291d1dd786c119836b60f49848c0-kul-edge1\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 1.059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":40577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (418), with CRLF line terminators","md5":"7e17007875d9720b39e97b726d3b2cdd","sha1":"6d302f7b9fcf25eeb84bd797fd16a7929674f657","sha256":"dc3a9dd715d1606526dff509f00f5b53b1fad53697bbd393ad637dcffd66d58f","sha512":"bfeb49b35c149c9ad281d95a41e330b58ae636ab6c235152b92a833cf361fcb41d4d868a1cc8c16c63720451dd09323acefdcbc59913d6219c711c389d571274","ssdeep":"384:K8QVgsRqLdsRqLwsRqLnA3iJiLrlnIVRq3aj1qIP7LMqHIqq5qiqnqIyL1J1WfsJ:K8QVAyQM79DyBqKBikx","tlshash":"9f03fd2278c91037423342875972274deaabc937db2b8496bafc576b2ff3c44e903559","first_seen":"2026-01-09T07:06:35.292403Z","last_seen":"2026-04-11T18:33:23.041261Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2182,"timings":{"blocked":430,"dns":58,"connect":179,"send":0,"wait":1323,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/4.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/gallery/4.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41894\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9acb069d6141a2dab42e5d8d2ed667f1-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.859\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":41894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1371df21946ebd9edad070c4774db0e","sha1":"23afa1c529d97dfaaaef48570dc88483c4bb784b","sha256":"edd32d2eda46c5d5cc576ca747bdbfb005c765ac5a9cc0e670050a0696f749f3","sha512":"3c725d077d5c40877c138a4662b9c8216f21eb6d2668dc1ace3ebd0f67d11dcce6f23c1dc47f100ff4581b7e4ab4b8d2abcb5d628eadd99153bff26e3c472801","ssdeep":"768:BzKUTL+2wS7rJfXumteWnovSbY/vfYqLzdTRz+2qkVc7npSojDl:0UTS2wCrhXum4vSboYqLrzUmc77Hl","tlshash":"0f13f1d9555e1e30f8e43ae8f90c96a8c71decad2189cd52f078bde6253117492cb2e3","first_seen":"2026-04-11T18:33:23.042985Z","last_seen":"2026-04-11T18:33:23.042985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1262,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/jquery.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 32576\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:57 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"17b8b-69b792d5-5328acd3c4f0761c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0c9278572cc4ab843b53e02e6f29d1b2-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.470\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-11T20:50:22.584133Z","times_seen":68476,"resource_available":true,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/icofont.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/icofont.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 15604\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"1ac79-69b792d4-3ab96b118b8e8607;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: db2b7c9dc95e284ab691d35aeb5610db-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.828\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":109689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4ec323d45eddd092db34adae046326d9","sha1":"c482734e626450e8c5a21dd0937811b330a80d9f","sha256":"495078a407a12d308b30715a0d3563dc3046414328d0a3ca2c4e3512c27facac","sha512":"c7481afe6bc93b47b514367bd3782146da520cfd29ee2b83a642a8e8d9dabea10979389a23617ef7707d9f38403307d3bebbd56154f3b3af7fa28b81e5ed4563","ssdeep":"768:dIq5EItckQfe31Ucktek45IZWR7bwmqhIfCHbEYqZMLr+qZXcpYVXJzMjdPLWN4e:dIMUckwk45KWBC3XLZzMj7Egu","tlshash":"70b3ccd4dbbd0c845721d8d532426630fb1dbb2a880f2e58e2a3799ca1f3615e6d27dc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.045212Z","times_seen":1591,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1133,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/animate.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/animate.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 4139\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"127aa-69b792d4-f6f3be38de09a67;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4e6df1713f2ca3f49d472016443e3df7-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.787\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":75690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9553df5b101bfd7910ed3637f4479e09","sha1":"180a945af9a97e3d13c481a56e935be48048bba9","sha256":"c61d53c6505e7604efa05c6ccef932f18d110d33cc7970696533e72ebdf732d3","sha512":"49ff03ab3be97d04475a1e443ca5455908ef2a977f5e15159f73aa73f111ec235248d697bc5481114f5bc05feac226af38744b44c945e5a55069ecf0b2fdb181","ssdeep":"768:truGuwpkfTf4ucuAfFfoHzfSf/fhfzSSSefZfX:QfTfsfFfoHzfSf/fhfBfZfX","tlshash":"ec735c6d2991114453738a1993df9e78263ce1631826edef73c2588bcf86fac63c9607","first_seen":"2023-04-11T06:22:36Z","last_seen":"2026-04-11T18:33:23.046104Z","times_seen":2368,"resource_available":false,"data":null}},"time_used":1107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1053,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/Linearicons-Free.woff2_w118d","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/fonts/Linearicons-Free.woff2_w118d HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/linearicons.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: text/plain\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: W/\"5514-69b792d4-11559c43670a4aec;gz\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6dd96b055625fea4aa0d1ed74dc98464-kul-edge2\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.697\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21780,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format (Version 2), TrueType, length 21780, version -15485.1","md5":"d0b0e0e5e4c7cc222b3cbfbcf46f5c07","sha1":"f93df62d5a4fbde71b4a2e4f32fa049efcac530d","sha256":"42de40c3f769353044141286b5aed23266dc7774c7dfdf945c240f006ede8bbc","sha512":"93034023cc97c9eb338d9029f6c519d7bc84604557ec1e4c7912f262fa1add839a834d7016617d51c38503831340a651cd51e100f97282fd7b840eda1f005f03","ssdeep":"768:OXeBrYh4LBf/VLxw3Z7dSl2Uy11575UcLEMJur:18OfR+mTyHTUcLEMe","tlshash":"b5e2d0312345f774c2b644e82a429af4a34a1fb294e1ae10c9b482616eef05533fdcf3","first_seen":"2024-04-04T14:41:29Z","last_seen":"2026-04-11T18:33:23.046859Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":969,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 10:34:08 GMT","end":"Wed, 24 Jun 2026 10:34:07 GMT"},"fingerprint":{"sha1":"C2:80:24:A2:B9:B5:FE:08:D5:9C:54:4B:3A:9A:8B:58:11:03:59:30","sha256":"4F:89:7D:DE:1D:14:7D:79:28:01:77:E4:A2:61:C6:AD:B2:D5:1B:97:99:F3:76:01:2B:E0:9D:C7:39:4A:42:7C"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69cac7a9-4668\"\r\nexpires: Mon, 30 Mar 2026 19:03:15 GMT\r\nlast-modified: Mon, 30 Mar 2026 18:57:45 GMT\r\nx-77-nzt: k7TfkeXoXZb++Sv41lICdu3KGlOWtSxN2khERGGWzV0wYj6XhgfD4kOfv6UPWcRuVoR1XnQ\r\nx-77-nzt-ray: fdb54123b92754bedb93da69b5b11739\r\nx-77-cache: HIT\r\nx-77-age: 18\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-04-11T21:27:11.218938Z","times_seen":571,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":68,"dns":28,"connect":7,"send":0,"wait":8,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/responsive.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/responsive.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: text/css\r\ncontent-length: 3182\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"5959-69b792d4-2cc72457a64a696c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 72cc35151c172c051f2d1839aa5c1043-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.589\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":22873,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1fe653ef8db1036a373977da05622595","sha1":"97c49a44650525ec2848832feec7f71f1884d3ec","sha256":"2d5275f25b5c88598632488e56e10d3a91892dd4f9d2f6833307e3af7db5c315","sha512":"21c596b760f2eaf2ac7bc902d36e1b1fca97de04f44806ea6bec8afa6f9d910a51b877de0566eef2aa1927897625c3eb6c71a09da8d267b3c60f9cba6deb4ebd","ssdeep":"384:AnDhYAiIg7u8dFzgFa5nJHu9JQ3UdDHFfZmX3CjGhg:6hYATuu8dF0Fa5JHu9JQ3UdDHFfZmX3o","tlshash":"17a2ae8f7de224043416727aadfb27a072b3d413d74edd9679f1a128cf482e14d92a8d","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.048571Z","times_seen":1610,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/popper.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/popper.min.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6164\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"47ba-69b792d5-53eea0bf08d30923;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 879bf553bb86c596ecdbe42ceaa34ec5-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.742\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":18362,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (18274)","md5":"0269e72ea643261447a59e685750b1cf","sha1":"89e76a70f48a2dcb5359a5b6a57badbf77cc5239","sha256":"18b80e40bb93ae5f8f1d3253b03d8e5d55b51341a27ed78cf42feadd012bcf9f","sha512":"ef203f77bf722211cfbdcad2881f12ffb4f25f43b195c714f05fe4b81f261d88cb945d4c2273db128869a2a7f3d0020ba2ae61a03ee510b6406181dbc9e1236a","ssdeep":"384:PvFHekJviNIGNi7wAjvOg/+f3+d/m5HfxoULOw/VoNnuGb/f/MgHknmjNzWN6j3Y:RBTjvZ/+msXyw9oNnuSf/MgEnmjNzWNb","tlshash":"8482a68c7a94f4a5166753b6807f550fb333a520218fb500b254d6da2c74eaba32fd3e","first_seen":"2023-03-07T12:22:43Z","last_seen":"2026-04-11T18:33:23.049409Z","times_seen":2107,"resource_available":true,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1210,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/validate.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/validate.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 5957\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"5198-69b792d5-81cfae9de1c30dbd;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 910b020ac9874ee04a74afb0b57dd6b8-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.781\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":20888,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20730)","md5":"e0a7fe67021f7028791330511820da17","sha1":"1716002d22dfde1c0855ad504b527864896022b7","sha256":"79e8230fcd2cc9b5362a68960c2734d6c929e52465861d47b5caa03efc1a66d2","sha512":"a13477f6164fef8cb455c1f4c29c18d498008a6aafa06409dd6da2dff8fd73c7576c4b188d58e0ab3f73c1c50a2539126b1f24c476d8518a9c58a1294e07617f","ssdeep":"384:Qt+KEKCnU0pMEdMAUZh/VL06g9B4gny+mz4CebUC3mIqNF5AzUjvNTqbrWV6r+Zm:TKCnU0XdMAUNLTwKgny+yxFMUjcz+Zm","tlshash":"3e92ba4c76c1a0575b9620f5a40b550bb1f39ab8600de02cb5bcd4e2bee4f856167fbc","first_seen":"2023-04-07T05:25:29Z","last_seen":"2026-04-11T18:33:23.05023Z","times_seen":1847,"resource_available":true,"data":null}},"time_used":1370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1245,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Heebo:wght@100;500;600;700;900\u0026family=Libre+Baskerville:wght@400;700\u0026family=Work+Sans:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Heebo:wght@100;500;600;700;900\u0026family=Libre+Baskerville:wght@400;700\u0026family=Work+Sans:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 11 Apr 2026 18:32:57 GMT\r\ndate: Sat, 11 Apr 2026 18:32:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32918,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"15b716697b5925d0c75dcf1fbe8df311","sha1":"c1d07f632a3193dce86b6b4df9188102610d1c2e","sha256":"ab5a092fd43f5f697f2d14587e1237db3e4e954228fcf5594ddd667bdac2393f","sha512":"56e88a25649066ccbdd0ca1087a895fac674c03ea935962cbe9d50acc5b65fe317975e48ab8ddfb26d5f5d200515a7a3209a90aa577e93454c844808283de572","ssdeep":"384:hjHchqYOzgwqYNxqY3iqYXkqYs3p6jH6tQ7uRv:hjHcJOzgANZ3WXkQp6s","tlshash":"d6e23191042b55009b831cd223ce7e36ef5ea250b044c479abfe5b8bed9ec95a37935c","first_seen":"2025-11-20T23:48:42.628994Z","last_seen":"2026-04-11T18:33:23.051008Z","times_seen":200,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":134,"dns":1,"connect":22,"send":0,"wait":32,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/themify.woff_-fvbane","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/fonts/themify.woff_-fvbane HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: text/plain\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: W/\"db2c-69b792d4-e4d9765faf47b297;gz\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5450580d260860704bf51c71b7efd4bb-kul-edge2\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"text/plain","magic":"Web Open Font Format, CFF, length 50075, version -25917.-23552","md5":"671fc2da191d9aeea954ac886c863684","sha1":"8366c792be7dc11ccf13b4bd3bbeb6fc5fb05b66","sha256":"3436575e7280c6e7cba9ca5ca2e5df72cf38fcc63bcd1f8332393b0585fc232c","sha512":"b69ead9cc2bc28b469bd16556d222d71063a8f5c231dc7fdcc0dd773a2d6c4a521a3bd2623482e6da72710d30e69a2a2ddb3e1d7601335ce30d099eb334d139b","ssdeep":"1536:hTUmbqB4qj0KJkg4T7B6FSH9cACgcj9xHim6OxJTG/Hwue:hFqiqpqnR63g2fbxJs","tlshash":"5d93430342a5cbffa48b6be010435ef999fa7b757720dbb2ca71d4ca1d296405dde0a0","first_seen":"2023-11-19T00:43:04Z","last_seen":"2026-04-11T18:33:23.051723Z","times_seen":103,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1105,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/about/home-about.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/about/home-about.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36522\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4fa9a6d7ce87cbd08115f5b385856c20-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.651\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":36522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c53f5f25dfe9c3fa2862a40c016ebfc","sha1":"4c08436cd94f46bfc2867515013decdbb19e5966","sha256":"b0cffd888fa6a79a3c71064212013e0f018c1a7b48f28ee013e265bc87d510b4","sha512":"42deefceaeb8cb002ddf2e626b2bdc8aef6675945cbeb308488025f30fe50854de5ffe992b56734812750df87914fa9cfa9b4d08af32b8aea9a5616051fa1ef9","ssdeep":"768:mzv6vC2D5oQ/g79KqpguuMU41nkCGm4gkRmqNNZ+uMa3+:1CAoEaKqSuua4ggmqNNZ+Q+","tlshash":"f6f2f1e2352dd3f592b0063f847e5e84a755d242d36afd71ae8f4fb5880740b21ca68b","first_seen":"2025-10-16T06:49:21.034221Z","last_seen":"2026-04-11T18:33:23.052547Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2016,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:09:50 GMT\r\nexpires: Mon, 05 Apr 2027 10:09:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 548590\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-04-11T21:36:25.327967Z","times_seen":16324,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":177,"dns":1,"connect":30,"send":0,"wait":15,"receive":4,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:09:50 GMT\r\nexpires: Mon, 05 Apr 2027 10:09:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 548590\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-04-11T21:36:25.327967Z","times_seen":16324,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":129,"dns":1,"connect":15,"send":0,"wait":15,"receive":20,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/favicon.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:33:01.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/favicon.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 13255\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:33:01 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"33c7-69b792d5-632a7b6a2ddbfa86;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 69b991fcc53fddb4dcd9952a96e0f650-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.548\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":13255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 36, 8-bit/color RGBA, non-interlaced","md5":"31b384fe74cb1e6efc24aba97e054fd2","sha1":"6ee09b3ce22692617cd3807d6e97bd3b227f403f","sha256":"ac4b8a8b395115919ca6fd546ccf5fa5012892dfbc95aa764f1cd0b8f751418a","sha512":"557f65bd4d867c8599f7db8ccda538f5cd88d14f7f88979549bf226d8f3a868bfeda679c5018c12b5131df0cfb0bf4de2d3d06c20c35209d677a5113ddae7762","ssdeep":"192:y2+EuL9IVYk4kK99sv9+PdZsOevRA8F7ocgeU6G78fPiZjG7PFQpMN1QO+d6OSLQ:J3O9zL+msPSFQfPYjaQ6MOfxL9oVlF","tlshash":"6352af53c2de645fed4c23f6884ee9bf8f0a50d5ab9148c6b4400147269b7fb03e189e","first_seen":"2023-09-16T07:22:00Z","last_seen":"2026-04-11T18:33:23.054887Z","times_seen":999,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/bootstrap.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/bootstrap.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 19454\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:57 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"25623-69b792d4-2126b07c51671035;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6c5aba51049fa0b79277b540b9ceeba0-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.557\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":153123,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"22392817c7c85f71231b55d89f7cdc5f","sha1":"9aed24a179a656eeaac2d9796a8daaa7504d6b10","sha256":"49911016ed3edb968ac5b0ed5431d025766354a593e7d8a14ac8c9740b851cf9","sha512":"7667aafb74c337041e47929b1179ecf5722dc5f76e208dceb6ff55b4f01ab30c106a90cbe97681af2f3e9560f33533bb018804519da3f25d17328f76c088fcf2","ssdeep":"1536:TtfJxYrkplD+sEBpy0cuJcH22DWg5SNVUpz600I4fS:TtfJ8NVUpz600I4fS","tlshash":"12e383dbf581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b492c70963e4c","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.055918Z","times_seen":1520,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/gallery/2.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/gallery/2.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21528\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 57e445cc162ac9230469f2b20b48e4f9-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.237\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"731fa31770100bd9aa3af92c59a97fb4","sha1":"f8d21ea7acf447c0fc526398eb4e34b59844a8af","sha256":"1b2b988ad4b4e91133011758a61979f4a0e53d45fb66e667e1dd8c0ffba44265","sha512":"159505a755125d37beb11f82b9da2569dae4167c11ec4b6bf5e966d67be9479e82786b9c4e847bfc1377942d304a272c5ea4b55c8132782fd70ab6238eb83a8d","ssdeep":"384:36DPoGTq52ZyAqmk1H+UfktfXUnAFLRUfbPJFYEjWDFcPrc61GKmRf:S/q5eTi1H+bU09UfbPJ3jOGGrf","tlshash":"09a2d02370fb48377eb518e13ea10458fa86ea1de21cfb366a47c76672d60c6c460d5a","first_seen":"2026-04-11T18:33:23.05686Z","last_seen":"2026-04-11T18:33:23.05686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1601,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/bootstrap.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/bootstrap.min.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 15168\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:57 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"f3cb-69b792d5-10eb7c7042538f19;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d8dd7848113ae0ef17ddb23741e91bd1-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.558\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":62411,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (62126)","md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-04-11T18:33:23.058365Z","times_seen":2312,"resource_available":true,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1008,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:09:50 GMT\r\nexpires: Mon, 05 Apr 2027 10:09:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 548590\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-04-11T21:36:25.327967Z","times_seen":16324,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":129,"dns":3,"connect":22,"send":0,"wait":32,"receive":11,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.fancybox.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/jquery.fancybox.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 33369\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:57 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"23b44-69b792d5-20f0201008791655;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ae2157ad87f563470f014a2e68f9de21-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.509\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":146244,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"217c1667b830e818ad4e170c25d5222f","sha1":"e4baa41f4d86be0dc1b127a5d6d8901263216e10","sha256":"b52a13e34a3c8009c820a585a20add686c108104297527ba38f9c34e15d633c3","sha512":"3ae977c03fe17e1df2efc236e66fe3eb2021889b0a7921d5352330456936026ad7f50fb650a8c4efbfe0d9a21dc1c8582f3c4eb964496ae31d0a858924d5b928","ssdeep":"1536:B6Oq9WK+zQTwkt3CGmG4Pww3FS10RMo4RzP69XkVJG5ldYgbGg/06OXQeUg:BSPw0SGmGgw1b69UK5XbGg/06OXQeUg","tlshash":"41e3844a16f211218d27757e9bcf701ab67a8013a50cee213cad83885fc577942f5fea","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.059226Z","times_seen":1608,"resource_available":true,"data":null}},"time_used":1356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":454,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/assets/images/logo/pay-swift-home.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /assets/images/logo/pay-swift-home.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: text/html\r\ncontent-length: 1759\r\ncontent-encoding: br\r\netag: W/\"119f-68074818-3623a38cedc58683;;;\"\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\npanel: hpanel\r\nplatform: hostinger\r\nretry-after: 60\r\nx-turbo-charged-by: LiteSpeed\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 24da260011eafeae4f1fb267877514d0-kul-edge2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-04-11T21:07:11.085497Z","times_seen":27079,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":667,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/animation.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/animation.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 843\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"2dd6-69b792d4-a5eb52dcf11c6965;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9b19519b5a36182e756ed9708bfc3ec9-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.783\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":11734,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"283a999ced8386b4eccf27cf8714fb30","sha1":"a40459fc7fac6656335d708cce9c9de87594b9d0","sha256":"d39a8775a6fa3b47a46d8962aa270de02cdd10f303f39c44d3e158dfbc5f07ae","sha512":"346a84db8ba075a12546f055b7e3560912859564477ba8ce94ade5296de525684cca142ecf5f99e3d30a81b5d029ba147290deecd98ba58bc8de0d9a0411dd30","ssdeep":"96:5RSb9scSZM1AlGXb9s9SMM1xuqSxsscD5xSQssc6uKS9ssc/yqSx0scDoujQR5vV:dujQR5v8hF4IZnqIJzq9zqpOLCS4vS4C","tlshash":"a732b1ea5082654547370a3317dfaa049c744ce3a622bcbd71ef950e9f187683387a7b","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.060858Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":961,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/fontawesome.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/fontawesome.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 12449\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"114c2-69b792d4-9d584233788d6ec0;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4b34c1a3f6aa87a43e07cc47d91397ed-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.559\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":70850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"810fc89b3cb5bdad387a5bf5304c3c78","sha1":"1b0450a6db44d4479b7043ba13e92aa51d1cd59b","sha256":"7eef44924185c74fd34e071e396104940ec6a795b339e74f757c816eeb3ebdb1","sha512":"ddddd512ac0e88452aa05b1b800e714297af366778c638aef56dce2e6fab5e2bb09bd58ddf90083e59eba52e937364d735efda932258e7dc6b48006a9f000ddc","ssdeep":"768:F8spWLsWDIc5uKjCWOnqEUmPJMTytx39gKRMvF6iQDmFIY5maJF:F8spWLsWNuklOqExMGtx39gKcFeiLcab","tlshash":"f1630afce1fe18904391e4d12743a374bb2db72cac4a6d9cd2a2799db2c0658d1863dd","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.061648Z","times_seen":1532,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/icofont.woff","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/fonts/icofont.woff HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 645604\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"9d9e4-69b792d4-fcaf602d1b2710a5;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5d38e42571d5be6ed326d2ec42ea6ed1-kul-edge2\r\nx-hcdn-cache-status: REVALIDATED\r\nx-hcdn-upstream-rt: 0.269\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":645604,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 645604, version 1.0","md5":"f6ab04aed30a8643bf94fe00f7ff0b59","sha1":"3a6d3ab13e750d77c6b7dae1cc5365db02bbae4c","sha256":"53bbbda5480a031a71fc168352c18a81654a330c78784eb303c51e8a8dee66c4","sha512":"8e85ac4462b0beb96766e8ea2d6515b25a9b036ecd15d01e9610ad01843ed9dad1768be8362240c625253e4a8ff477eb2bd14baf77b8bbb37dca77aabb80e122","ssdeep":"12288:wru36y9tMB+L+DsFieVtbSM4XNzQxlv7prjKaYs1WxiZLbQJvB:ZrLU+CDuieVtwhQxlvxePEWabQJZ","tlshash":"32d423d138fba8db9c64633b46164e118a9c310efe2dd76552bb33c68cb645a8e13dd0","first_seen":"2023-04-18T08:58:35Z","last_seen":"2026-04-11T18:33:23.062431Z","times_seen":1539,"resource_available":false,"data":null}},"time_used":2237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":449,"receive":1788,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/main-slider/2.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:33:03.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/main-slider/2.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21528\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f6835fd02e43bced9153f81d57efe55a-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.830\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"731fa31770100bd9aa3af92c59a97fb4","sha1":"f8d21ea7acf447c0fc526398eb4e34b59844a8af","sha256":"1b2b988ad4b4e91133011758a61979f4a0e53d45fb66e667e1dd8c0ffba44265","sha512":"159505a755125d37beb11f82b9da2569dae4167c11ec4b6bf5e966d67be9479e82786b9c4e847bfc1377942d304a272c5ea4b55c8132782fd70ab6238eb83a8d","ssdeep":"384:36DPoGTq52ZyAqmk1H+UfktfXUnAFLRUfbPJFYEjWDFcPrc61GKmRf:S/q5eTi1H+bU09UfbPJ3jOGGrf","tlshash":"09a2d02370fb48377eb518e13ea10458fa86ea1de21cfb366a47c76672d60c6c460d5a","first_seen":"2026-04-11T18:33:23.05686Z","last_seen":"2026-04-11T18:33:23.05686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1010,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/main-slider/1.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:33:07.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/main-slider/1.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130136\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d84a58ddc7d9db34b312943bb222533b-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.145\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":130136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec9745f5b7c4c29fe90d6ffc349f9776","sha1":"5e56226d1aaa3479b30aa1ce2c340cfb19e4f984","sha256":"2717265450f78085ef57b66e41ff39955eca776bdf18d88e36802241dad1c782","sha512":"38efa96ecaa124c85c0c811c8f784a0493a67c40d681d76f07551b71e686e1a3f18e2b1fda04ecf0b25039277a5a76b90ab356fcc79c7142378cbe131109ae02","ssdeep":"3072:z+q4pe+JZWXGkqX8VD2xo/y9Mpexy9Fs9j2M9GEo5cwoBwiwLxAw:iVQ+fWXIY2H9MXM95o5NooLxAw","tlshash":"e3d3129ac3d4d2a7e4dcdefe942c4e733a90f9a21c97a0fe57f605c16d428349948838","first_seen":"2026-04-11T18:33:23.034078Z","last_seen":"2026-04-11T18:33:23.034078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1324,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/assets/images/logo/pay-swift-home.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /assets/images/logo/pay-swift-home.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: text/html\r\ncontent-length: 1759\r\ncontent-encoding: br\r\netag: W/\"119f-68074818-3623a38cedc58683;;;\"\r\nlast-modified: Tue, 22 Apr 2025 07:41:12 GMT\r\npanel: hpanel\r\nplatform: hostinger\r\nretry-after: 60\r\nx-turbo-charged-by: LiteSpeed\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8515cfefad1b28368ec26f3381690dc2-kul-edge1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-04-11T21:07:11.085497Z","times_seen":27079,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":856,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 11668\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"9e63-69b792d5-db5202062c9c6c1;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cd67b9f5c24cf9013225fd6a7cce7ccc-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.904\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":40547,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-04-11T21:31:32.633656Z","times_seen":3535,"resource_available":true,"data":null}},"time_used":1408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1307,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/jquery-ui.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/jquery-ui.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 117978\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:58 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"7f20d-69b792d5-8b22392ba71b55fe;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fae7a524c7e3c61cb62a6d6f40a99b9e-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.811\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":520717,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1002)","md5":"45bedc12dcfee87eeec2fab0eacc4282","sha1":"a9209013b11229858c017d6fbd1ba4320a0e8b61","sha256":"73b6f5a1857f503b293bd34466cf196cc7dc8f340ce397ebc9b2a3d19b12208c","sha512":"f0786f6685be36425fef0dd42311b99f7c230942c3159b709acb6de2de57c958e28954559c87b972cc0054a724be63cfb20ed0ea80396acf68c8022179c715cf","ssdeep":"12288:1femHFgymz6DdHCcmMm/W/CCeS/QRzbrVDDdRO2:/DdHCcmMm/W/CCeSIVDDdRO2","tlshash":"58b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","first_seen":"2023-03-07T12:27:54Z","last_seen":"2026-04-11T18:33:23.063926Z","times_seen":1906,"resource_available":true,"data":null}},"time_used":1972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1246,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/owl.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/owl.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 1060\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"1046-69b792d4-91dea901da03b2e5;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 90ea837b815a7c82d2618db61ce3321b-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.799\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9e5b4a71d17785de854224c2284b06b5","sha1":"f468c847a146b389adc1f7b2aa97b6dfa8dd46e0","sha256":"adc69ed1b3f5da2a8874da014b3e14f98e9ceaa85fdc947737c1e57c454e3260","sha512":"4145be2234e4f6525879a73803fda084ee355f66492b05eae50fc794dc7c10a0fca2a7f8bcdd10dca897b29321ae8d76454316b9ef374f0e2c31713592181957","ssdeep":"96:OTgJdduXehkNbIAIhIL4NV5mVrKWT+8FjFE9pgrB147gBuU4X:OTgJ/upNbIAIOoV5mVrKWT+39pgd147j","tlshash":"6481dee72567010e381b93e01aae2a56393d8443d81d8c58b6fb5609cf8ef88215ff5f","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.06475Z","times_seen":1516,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/jquery.mCustomScrollbar.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 3706\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"a7d2-69b792d4-9978031904e4725b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3b8082a01345ea3e04e790592510e668-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.770\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":42962,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42962), with no line terminators","md5":"e315766f9faba131997b2eede211089a","sha1":"9a9dd5c15e387bce7e771c4f993be55c0719f4d7","sha256":"1bb652d030aa77242a2e7eb0626a3e95576f817a85c6a10445c0a27c2dc5f7a4","sha512":"4e66bcfcbe78e1e435ca6cefe27b0a952c98ad833b7e977c5e480bcacedd8dfaac6f8d595b52e628f9a300e51cceffe571a8ff765b9c02d10f8c6548c8c7421d","ssdeep":"768:VStyRbNRmYdFZwt6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:VStyRnmYdFZwt6+R9","tlshash":"9f13179a2a4336dffb4f447dbb81379a11fc37834552166cb0d758a4ab88bf7a439402","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.065612Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":957,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/fa-brands-400.woff2","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/fontawesome.min.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76612\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 16:16:36 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"12b44-69b792d4-35260dc016eecdbf;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nage: 440183\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b4582f5098fbf0288536a2d7d8c3d236-kul-edge2\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":76612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76612, version 331.524","md5":"a06da7f0950f9dd366fc9db9d56d618a","sha1":"509988477da79c146cb93fb728405f18e923c2de","sha256":"5d9190292acdd48ba0fc35080f7e7448f3cdf0d79199a4d23f0f49b5341fdf29","sha512":"b53d839c5464f7a2904cabcd1e7d6456e2ed1702254450833fc586f4b3a4e6dc07c24f443415a2710e241af8d2dda1b9c17f050045e76501e9b5aa2cb4801ea8","ssdeep":"1536:y2zPXSmtLX9JNsnZVJakesPqIqI9Fz7s4HiUljj7Gu:y2zvxtLXs9e2zYa7Zj7","tlshash":"977302d0a153149af2b02645f91ea4527c19b93c97dcf2643a3aff726ed480fd294f81","first_seen":"2023-04-06T09:36:23Z","last_seen":"2026-04-11T20:41:12.664411Z","times_seen":7293,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/remixicon@2.5.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 13855\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1af66-MA7aTWKCoG0FYjklj9PTw0TfSFM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230094-FRA, cache-rtm-ehrd2290051-RTM\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1939431\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaqF%2FyvO90qy61lfcmTZHqWUMaR7PurXFErxsPw3%2Bf%2FfDXndvzDchdROdNNjFpdYL6zxyv5UcJ707aV6UzEqu4KWcsmWienguNphbCyqoW46AZAQIWPJIRPdFgJUsCVOHoY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9eac13adea1d8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110438,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a8aec561d3b9b905472b815cb2b818c2","sha1":"300eda4d6282a06d056239258fd3d3c344df4853","sha256":"13e29a29baade86f4e7a88d8e076d6a6f3ac8950757b50a0f8bbea1c33658d5c","sha512":"096467665b61140bb4e669b83eee51fe290357fda33e8e9c82692976d04559463dfe6a8d16e4e68309e9056a8388878c767e70bf534440576df36fc093ebb392","ssdeep":"1536:jncvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM1:j48v4cYcKZ7clh","tlshash":"45b3c8beea4f44801702e8d66367274163b9b77d8d817c7ad413688df7c766883862ec","first_seen":"2023-04-06T15:22:09Z","last_seen":"2026-04-11T18:42:40.212059Z","times_seen":3024,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":4,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/fa-solid-900.woff2","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/fontawesome.min.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79444\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:33:00 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"13654-69b792d4-cc89fe0431419b88;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f0977986a16d263b0c63197898fe4c40-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.273\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-04-11T20:41:12.608067Z","times_seen":20042,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":807,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/fonts/SignericaMedium.woff","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/fonts/SignericaMedium.woff HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:33:00 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 69832\r\nvary: accept-encoding\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"110c8-69b792d4-b3c86163ecf04fc5;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c1fa954ac39828c15eec57a987b8ab9c-kul-edge2\r\nx-hcdn-cache-status: REVALIDATED\r\nx-hcdn-upstream-rt: 0.331\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":69832,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 69832, version 0.0","md5":"fe8345ade4b69c50b69d31638cb495f2","sha1":"7923c45e6008c01790b4e2df7a5ddf0eff4a60c5","sha256":"23f02d3c3eca3daf85b5af7f31c1bc943c0b188773f883a8afe8383c74dcdd6b","sha512":"06378f29860298dac4a4541702332d983b4a12d0b8b615c91269170369b9927f36a3944d9ca46e8e6b4735d2c9e907dd8d0e4e59a24091c4915e2be213929f80","ssdeep":"1536:PVSbVz3qgJqFpGSpJee4jg5v5UjDcTWLyteokA45ldj8F4mR:kbVz3qeqFpdd4I5UjQWLAk3llmBR","tlshash":"1b6302494c35bcc0cb3d643bc24111ae4719bb1c6e7269d9ce8b92f6a9e44f81b07a5f","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.068917Z","times_seen":1529,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:59.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pay-swift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:09:50 GMT\r\nexpires: Mon, 05 Apr 2027 10:09:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 548590\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-04-11T21:36:25.327967Z","times_seen":16324,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":132,"dns":3,"connect":34,"send":0,"wait":38,"receive":8,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/2.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/clients/2.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2900\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: bdadf50df02020a75395a89783747c27-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.564\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3b39d4bfd074295b1930c29ef62021e","sha1":"470591c81be8aa24f449dfed60e6caca598d1c91","sha256":"6a0a9924589e388fa5823f46dddc23d762fc0280a392ba70283986cb9ba9cc18","sha512":"ba132929e7fc0d57d02121213c9af171163837ab179dd8ebcb0361de8a3505517c399276d69ff7d8cc64e9240120a7d371cde9353ec4f204bf91ff9e834c10e6","ssdeep":"","tlshash":"15516d906b16151aec0749369be43f2a8a00caa863618d51379902ae6cc7aec2dff841","first_seen":"2025-10-16T06:49:21.18792Z","last_seen":"2026-04-11T18:33:23.070268Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/linearicons.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/linearicons.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 1495\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"208e-69b792d4-b4949333e759ae36;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: eae788b208959cc45794e2e75d401867-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.822\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":8334,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c7bfd6b68aa6ff3a7d355ecb83508265","sha1":"35bb6dbdc842921aee1940641c1af050043ecbd3","sha256":"05b4f1bfb6c8050752c208bf4ff7b0811a466d23d1f0fe1d8bf28ef5d4fd242b","sha512":"6350d0cea7670dba55acf938fee1be22c1a91cada3cd3b095703d93c935670222aa5963d78e2ee44ae13ad45f98e12709af788f2678c3c06efede0ef042bec74","ssdeep":"96:0w76u+LfH/7Z8iFRSyUxOyUiBjiBk2652bSBQzE2p/ylzUfhTZJ3kLbPzzUhF5YY:jW972YYXO6Te7AxJ9M","tlshash":"5b020fa4ed4d3c825382e4d23b443e802b2ef7389d012d59d417bd2eb7e32569da07da","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.072511Z","times_seen":1457,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/jquery.fancybox.min.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 2905\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"35a7-69b792d4-3290bb4f234b07df;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6470653562ff0493fe04a8cd0859b1e3-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.591\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13735,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13734), with no line terminators","md5":"35d290afd71a6053d8195ea13170b4e9","sha1":"a64676403bb5c23f9800963b0b8f0475b532601f","sha256":"e467f75601e845da217ae845b688b227a19fbf1e8fc776a42a4905869496d2e2","sha512":"0136028681f47450835a9bd6345bb647c95f2be3e963980e5b5e355f3cdc602772313640c5d9b72ae71252bbe8099b11de5663f3fde49b71a5170e42959f7788","ssdeep":"96:tGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:tVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"b0524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-04-11T21:00:00.358288Z","times_seen":5539,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/resource/news-2.jpg","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/resource/news-2.jpg HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22602\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8ee2c59846c0c0fa3c44854514b830e4-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.079\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":22602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e438a4836d5dbbe5882c114e04038275","sha1":"2f5b0a9fc4613a346e954e8efeb6866bbdf0390b","sha256":"92261b780e09ffbfbaa48e26abdee00ee727824dfedcd5f13008c894c03a6950","sha512":"ba0d5e325abc4e1a4339932a905abf10d8f3265d6d975aa4e38a24d172b4a0727b2bb3e2f7b9eefd37ba79ca146c162c6b0ae7cb57af20d8cd6cae6055c8dd5e","ssdeep":"384:BAvHbScuq1FhlQuqIdktxTN/gf43LBSVY1pYBBe4EL0SunfUsl5lS2jZiiKO5eG:e2i/otc2xJy43LB1a/z+0rH5l996Ox","tlshash":"3ca2e1558688b51ecea8dc3b482a3038682eed3755303a005bc0d69dcf9bb50f64a6c4","first_seen":"2026-04-11T18:33:23.074288Z","last_seen":"2026-04-11T18:33:23.074288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1468,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/js/owl.js","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/js/owl.js HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 17512\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:57 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:17 GMT\r\netag: \"14d37-69b792d5-4b0f969cd248b34;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a2279c91c8f8acaeb67f00242d565afc-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.562\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":85303,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"54428880ec8df798ac3d666f5113c7ff","sha1":"9e43e74b8677f39e87f1b11be4d536c618b14bb3","sha256":"0402874ff311f284b18af9e4c453ee5bf0916a3b7335f0be52dcb54a1a31338b","sha512":"abceb872c8942d366a533c0c572e0e6e31d1b428ad2bc6fa1e746fd31811b6f8dfcd77814723adf44e1a8585436b511097576159b8eab40706b025e3158eda24","ssdeep":"1536:/PLoreUScogMjVNPP8aLMBJk8u9hKt1o619IYj1oJ0SQIOZ:/fHNPP/qJ9BoC9XplIOZ","tlshash":"e48383c5f36c261b422a31785e9e23ce713d412ad91118af7ca4e9dc28d546c836eff9","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-04-11T18:33:23.075533Z","times_seen":3866,"resource_available":true,"data":null}},"time_used":1206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/jquery-ui.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/jquery-ui.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 7791\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"8d99-69b792d4-c1c08764c914569;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a2f616ba37b27ecb25a4d61b7f634075-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.560\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":36249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"ac79a49731d732cc8f28a691d88ac743","sha1":"35b060071041620f3a886adfcc812fa82385661b","sha256":"b904a75d7ec761c670bdc67cb92247bf9116522bf685b19af1e9d2836a41c232","sha512":"811e4949cd14cf5a2e643fc0fbc4b09db6bad4d514603751e77839f23e78af07ef9be01d82a4d1b08fd6212d4c7d39e2a99848c08b5a0b0e5942d388a821613a","ssdeep":"192:10OW02ANbMb6lOn+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHllPF:xMbF+vaW1e07/PiF5fy/EhDS25qL","tlshash":"14f20c316b432919ba1bd1a425a11bf7d32e1342ee2b6e7f64aa345cc3d54e0c0bf5b4","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.076688Z","times_seen":1594,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/css/themify-icons.css","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:58.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/css/themify-icons.css HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/front/css/main.css\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:59 GMT\r\ncontent-type: text/css\r\ncontent-length: 2716\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 18 Apr 2026 18:32:59 GMT\r\nlast-modified: Mon, 16 Mar 2026 05:19:16 GMT\r\netag: \"42c0-69b792d4-4ab91f711e161b7;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\naccess-control-allow-origin: *\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 27d2c224b148b71d32deea273a4046b6-kul-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.730\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":17088,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"da1a78679102863ef98740690878cc73","sha1":"a72c8cb318b70efee83c07d880b2ffa71bd8b294","sha256":"3aba6fdad68533dfcc2285e0b8572faea7a3527ad857135fb2659f2e1d266d81","sha512":"716883d7a254632f9b0f74e2db743a69c2f2104d899d5f932924ef3b2688453b376a8ac51a2e8817242baa3ad6cfab0778fd1314d8d48adfe5ed1e4eda7ff2cc","ssdeep":"192:Yw1Nw1yU1v1z1ylSYj8w357YMqrk3x2S45gnDLq+TLt4OW:iYjfpsBqn7LG","tlshash":"ac72f8e495bf2ca41315e0c163467235fb0da728da8b2c5ed2b37d9ca9d3a11d6c22dc","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-04-11T18:33:23.077764Z","times_seen":1609,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":953,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15e40\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 11 Apr 2026 18:32:57 GMT\r\nage: 1665718\r\nx-served-by: cache-lga13629-LGA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 20, 27219\r\nx-timer: S1775932377.301816,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30957\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89664,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-04-11T20:05:38.519059Z","times_seen":28000,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":17,"dns":4,"connect":13,"send":0,"wait":14,"receive":5,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pay-swift.com/front/images/clients/1.png","fqdn":"pay-swift.com","domain":"pay-swift.com","tld":"com"},"ip":{"addr":"84.32.84.18","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pay-swift.com/","date":"2026-04-11T18:32:57.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-swift.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 04:04:12 GMT","end":"Sun, 14 Jun 2026 04:04:11 GMT"},"fingerprint":{"sha1":"E4:96:34:BE:D7:6A:FF:4C:19:35:4F:92:40:C1:02:C7:DC:A3:B6:5B","sha256":"EA:1F:19:CF:59:6B:74:D2:21:63:02:97:C1:96:B2:92:EA:11:64:C3:70:75:ED:82:29:D8:38:78:27:1A:15:B5"}}},"request":{"raw":"GET /front/images/clients/1.png HTTP/1.1\r\nHost: pay-swift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pay-swift.com/\r\nCookie: PHPSESSID=30viac94gvkf4ai4lh1u4qkbe9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Apr 2026 18:32:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3612\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e7cec2437e596fe5047ef8356cdd505c-kul-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.772\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3612,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fb68fa23faa3a5e7dbd8498e1b29635","sha1":"79cbd16143bc2636dde397e65608b796c74095b6","sha256":"8a4f7ea8d60de12e737878c95c60f2588a42cec783f8c8e4061185cb98499154","sha512":"229655bde4878f6552cf64403eff9db18b5ec6a94c4e6c9dac361547d95913cbd779e3741a2ddc705a0a9f0e14c966c6f431a9bc156bf4bb9866856829a26e09","ssdeep":"","tlshash":"29711a2e8e6379d2eae61e3ee43047b8b087bc580614058a39061db30dce7151d86eee","first_seen":"2025-10-16T06:49:21.149068Z","last_seen":"2026-04-11T18:33:23.088645Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1217,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-11","alert":"Sinkholed","trigger":"pay-swift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}