{"report_id":"39820366-009c-4afa-ad56-b147601f0452","version":0,"status":"done","tags":[],"date":"2026-06-19T00:55:51Z","url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"title":"paxasfinance.com","dom":{"size":985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (984), with no line terminators","md5":"e68040b89fc70487e736c3ff4167ef4a","sha1":"2fd9d639eac57bd68463dd5e2de01da15e405d81","sha256":"723ddac8a14395167820cf292373bfb1be2b2e8e3a1d566ad45d788e5accba98","sha512":"3271e59fe01207621cf1fd0cfbe64725ca0fe62440ed4cdebce47d6da5a53c32eda67582579fa9726dc9eb7d8badd00069f39a47286f126c6d2a34d56f61c3de","ssdeep":"","tlshash":"911121729184101ed352d198e0e1373da3c2c40dcaa28ce2b66925b3f6c5b26989b5f8","dom_hash":"domhashdda2f72fae377190c818cc3070d0de92","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-24T00:55:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-14T23:49:50.803257Z","alert_count":0,"request_count":2,"received_data":192854,"sent_data":949,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-06-15T13:54:50.303313Z","alert_count":0,"request_count":5,"received_data":437510,"sent_data":2941,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-14T22:40:52.388947Z","alert_count":0,"request_count":3,"received_data":69163,"sent_data":1566,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"216.239.38.223","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-06-16T16:23:47.671518Z","alert_count":0,"request_count":1,"received_data":32349,"sent_data":572,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.cryptonator.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-12-23","domain_rank":0,"first_seen":"2014-03-08T18:00:43Z","last_seen":"2026-06-19T00:41:31.103055Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":14,"received_data":304738,"sent_data":7827,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-06-15T07:35:15.654957Z","alert_count":0,"request_count":3,"received_data":282373,"sent_data":1547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-06-15T07:47:56.708184Z","alert_count":0,"request_count":2,"received_data":130291,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-06-15T19:23:20.459031Z","alert_count":0,"request_count":2,"received_data":79231,"sent_data":1090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-06-14T22:44:42.719935Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":548,"comment":"","tags":null,"fingerprints":null},{"fqdn":"blockchain.info","ip":{"addr":"104.16.118.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-10-15","domain_rank":12007,"first_seen":"2012-07-04T10:31:09Z","last_seen":"2026-06-14T19:21:35.158663Z","alert_count":0,"request_count":2,"received_data":4010,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-06-15T07:32:13.522223Z","alert_count":0,"request_count":2,"received_data":175553,"sent_data":1004,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-06-15T13:42:15.16462Z","alert_count":0,"request_count":1,"received_data":485,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":40,"received_data":574398,"sent_data":21637,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widgets.cryptocompare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":1460618,"first_seen":"2017-01-31T09:13:32Z","last_seen":"2026-06-15T09:12:43.58807Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1042,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-06-14T22:55:30.147967Z","alert_count":0,"request_count":5,"received_data":48618,"sent_data":3081,"comment":"","tags":null,"fingerprints":null},{"fqdn":"paxasfinance.com","ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"domain_registered":"2026-04-11","domain_rank":0,"first_seen":"2026-06-19T00:41:30.43698Z","last_seen":"2026-06-19T00:41:30.43698Z","alert_count":108,"request_count":108,"received_data":2475917,"sent_data":60004,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"BootstrapCDN:3.3.7","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/jquery.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"439b16301fd7737850f1d5e183339091","sha1":"bdf4341e4e6396f88f789ec58cca5aa2a4c02d5c","sha256":"8d43e17b5ed00f2de537a8847e7eb2df8d54ee1354c62748bbaa8dfea5ebf93d","sha512":"8a00cdf8e8e5ddda0ad3ad966245a24107da034af9e37a36d12ab392ae56e32b0e740e4947b0ebb4ab1ae8a4be64707fbc18fa0db9243455f0aa305aa4e49cab","ssdeep":"1536:PYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOi79xfWBZLBjda4w9W3qT9a98N:+4J+rlfOM9xACW6T9a98Hrp","tlshash":"d483c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85660,"data":"","first_seen":"2023-03-07T14:14:22Z","last_seen":"2026-06-19T00:56:00.202323Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-21T07:30:42.913119Z","times_seen":92581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/ie-emulation-modes-warning.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fafbc91bdf05ab4ac9c703332a330f1f","sha1":"6d22bca8c236f9c6dbed218c48055bc2c9a1d387","sha256":"69b0ac8114cd6ea7df970e491d67f1de52f841370550264d18256fca242251e8","sha512":"ecc3264aa0b0a6bd8631042adc565751fc64f20db73e887038fce914a1b86c381ee7b04fe91cd522bca85c9deffb631c43814fd80451fc1b149c28e08ecdb0d1","ssdeep":"","tlshash":"5a4113ae1921a2630732a7a9c75be005f37b431227159438b8cdd7112b72da9533acea","size":2203,"data":"","first_seen":"2023-06-28T16:08:38Z","last_seen":"2026-06-19T00:56:00.15274Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/wow/0.1.12/wow.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ca2644d1da30f25f9391d2436e4f26b","sha1":"726770317740c2f772c62967ab11460cdc38624b","sha256":"ff8c1eeaabf27111c1f4a10651da1e10917e912db6a54cdc7a753d27bedde956","sha512":"60b456b4784ddb185c2e05fe4a0b0278113683ed43e49af79c957e09184891e0a1c775d92c3388940b43e9e7f250ce46da35eb9057e38c84b3ef44d1f8b97a9d","ssdeep":"96:tGqKWTAs5kF/suCJ5waOVEE1FnePgJqg4SImYadsQ:43s5EsuCJ5fOVEE7ne4JqgpIwdf","tlshash":"6ac175c9b7867035c79ba1f6873f0105a23a19acb418447cb6f984e57d348a99237f7c","size":6139,"data":"","first_seen":"2023-03-07T12:58:05Z","last_seen":"2026-06-21T02:38:15.392202Z","times_seen":632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/jquery.fancybox.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"003e7d1be42767dacd59bd516082e9e1","sha1":"eef46b6fb2e460838cd7328a6e13ecda0cb1e194","sha256":"1c02caf2a0f16318965676fd4b265265728d64fba2794a20b07151a4e891fca6","sha512":"db34017f292b287cf5e4c263a6421d76075f06441fb11444130a50446fae25357db8867e087e291e9de2ef8538ce949948887835b89f54c59ec3bbd37f88b298","ssdeep":"1536:bVzfGevmRzMMdZfupgfjJ3kSEO261NyYMk5Sl5BSENUfmqxGcTJ7PBTf:dfGevmRzMMdZfupgbJ3k+NyYMZlvZqxH","tlshash":"1563089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","size":68265,"data":"","first_seen":"2023-03-07T12:39:16Z","last_seen":"2026-06-21T06:55:56.342859Z","times_seen":2898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/js/jquery.simplyscroll.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3944dd1d9f6ba7648f83238cd1fe3de","sha1":"9b4e48105ac5f537212b49c8ae6c2d96d9cf508d","sha256":"b8108d8ff16dd6d24d55c76a0c8ba14edf90df8267beea063447b4c17836ebbb","sha512":"35c49bfce438c99abcc122686f56cbd75a0b7f028c34c538951c6739b18af09e3d90e416e1dd21162d4ebbd4116112184be8b1e3957daaeb6020d727f7d5758f","ssdeep":"96:Yv9Kwgw1hjfgFjxXBt1ZT58eOfmNLoS+Yfjak+M28z9JsRiJa12ZgWQMHiQgVo3z:qT2VBtJloPYbwM209K4dWjVsUun+J2p","tlshash":"03f1430fb24424645bddf1e68152060ab53b905bf44b661fb8fcace83a69e1e213777c","size":7898,"data":"","first_seen":"2023-03-07T12:03:41Z","last_seen":"2026-06-19T00:56:00.14401Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/js/jquery.counterup.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0e0b047f2ed8512d5119b31432bdcf","sha1":"15c6242be4251b23c8aec6dd4620b95c37c53d22","sha256":"3145a2ee536ea38dbcb2563fe7dad866ca2bceff859249e069cf33224f43b7cd","sha512":"3af8b27ceebcd996492f07b6d972723db8c1062296ea7d1abf0bdccc6661ffe17e8a71ab169b1032cec7edffe2f673d5bfc30df0abaa4e9a0809b0ff88c0ff56","ssdeep":"","tlshash":"1c118cb97a0a298dba90e41df2efb0989176bebc0c80985b51c558401f95ebc3f5b730","size":1074,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-21T01:33:16.325803Z","times_seen":4251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/calculator.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad07b45de19534791b5e3812998f58fc","sha1":"4d8e3b6f6eba70da26c01915765484fe0071f748","sha256":"a78df739fa2e80056936ca27662e844afab078f85322f8678965559920d58de0","sha512":"37f9ef17c0db6f6342cfe576c2740214aa7a4c86b6f35d0669ca4b17726e5f344de2c284bc8bec04a14262135bc1d01486025a0d436fbdb651228509e22c97eb","ssdeep":"","tlshash":"43412700ffad670943a03674b9fd12c4e83ed9623960a1a2c1b10ddd85d0675db49edf","size":1927,"data":"","first_seen":"2026-06-19T00:41:43.711921Z","last_seen":"2026-06-19T00:56:00.184611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/wow.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a586cc49b879664d7cfff48e50dbb52f","sha1":"c90461326ec06a6d9d32c651431efb36dd7dbd86","sha256":"9ab5f1868d663b2fcf356058bfabd23a9a428f29d226fa5ac93cc3269775e01c","sha512":"57c8300d661ff408957e232dfdffc39126ed5fe3c8edb4c4128426af0e77a71e9187cd81c990ba28a07d96bd10ab1a4852322905905293c265836fe42a45ab33","ssdeep":"192:iF0VXSXMk/JCpC22iNVGHOFqWjJbY4JGe3dSDpKJCpyJYsduDjgXiJKQtG0Q:dxAMgoCPiNguv1kEfdSDpnaYsdudgaQ","tlshash":"7772ff893a5a31618737b37ecf5f8108fb39166f11551158be9c8ae41f7092482eaff8","size":16066,"data":"","first_seen":"2023-03-07T21:41:49Z","last_seen":"2026-06-20T17:45:29.862874Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/owl.carousel.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1a79ea184d48eac08037a68032ee093","sha1":"2be9bd99a52c926049f988a87a38f668f5e2e9d2","sha256":"93ab8ae2581efb90c20445709b7402e82bf74100b1446860305bb5d118917775","sha512":"a7ac0a94829f4d9868a49bdb76bf6863e44ff1e2941f40b4d316778058fae968d8bb7ba77d57f4b0abbbc027fc6afbc914666a76476091c3d6782ed12d370bf4","ssdeep":"1536:Z5u1MHUCBjloTO6JyqaiYhKPQ4ZarMMEpEa9wleUBj/DvRM3VX:Z5GUjloTO6JyViPZpMEpFalrBj/DvRMt","tlshash":"f393a2d5f31e262f4ab63320557e6309fa3dc525d10227ad78e8a5cc29a5448836effc","size":93440,"data":"","first_seen":"2023-03-07T01:06:40Z","last_seen":"2026-06-21T07:14:34.753259Z","times_seen":2465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/_/translate_http/_/js/k=translate_http.tr.no.r_k3LN84WKM.O/am=BBCABg/d=1/rs=AN8SPfo5ZLB90Mx41IgTn48WWoo1VCge1w/m=el_conf","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a92ffed4c0babe9268fbb9144cfdbc8","sha1":"72e47d136f7c5074fb1cc82aec79015a37472c85","sha256":"327cb9c321978fd50cdaff0ebe9acbe9d28abeadbdd14f171aa80bce2d790b22","sha512":"ce57f108f66d82ea18e6ba4f9595e0da2b9502c1caf94ed9390746f06c69bbff8a557bea47b325b6e330135affba7ffd4cfb2e89468b28ae4abe228fa38eac29","ssdeep":"1536:XI5LCi2WaeUMPk9ZiU593lGK17KYPdWi1GLi/SiLwNWBv:XETk9FlGK1lPd7NSiFv","tlshash":"ef73b7ccb6a674659353b4b5412f000eb23f68adf8484cacb288d8e1adf5949453bf7d","size":76937,"data":"","first_seen":"2026-06-19T00:08:33.202919Z","last_seen":"2026-06-19T00:58:45.93934Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-21T07:08:55.948855Z","times_seen":52971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/setting.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5b2f99ae4bfb9618b4f8044881f0ad8","sha1":"3bc25c6829888e90f74d1f42cc023b323b97ae3d","sha256":"d457afdd933355328bff8e19cc6eb1de6fa448fb719462ab7397abddc189377c","sha512":"36e952503d87a2d79cac37f280e0e076f7b1548d8cc9486b1c75926ede550150c34096417fa42ae0057f44a2541c9af0fa5081184a0db9809bfdbf7fa6a23012","ssdeep":"","tlshash":"b9416b40b79d031593b07234b5f92684e83de63236a061a0f1f80dde4be0a119b59fdf","size":2204,"data":"","first_seen":"2026-06-19T00:41:43.610363Z","last_seen":"2026-06-19T00:56:00.102708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-21T07:08:55.948855Z","times_seen":52971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-06-21T07:16:09.057071Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"53778063ec432ee5864bb179e865344d","sha1":"bce1ddcbfb6223c9bd0f9442f83023fcafd4cf3d","sha256":"c8e9fd5a3c8534f405e2341c7b9d3625895a2a5388b7569ea49de6087d3a4564","sha512":"8161a73f345724fd0bc986ac5736ec91519a9f9fac104be2722958512e2b236b7b5661080ca94981d48460468c3ee12ad1cdff5623f6454eb0d35c25e23ae888","ssdeep":"","tlshash":"2de020ed5d7130741613364b5ab5082c56d3a12061c1c0282d0e5cd90efc1c77c1567f","size":346,"data":"","first_seen":"2026-06-19T00:41:43.87531Z","last_seen":"2026-06-19T00:56:00.263651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8775b4ac92d5b0bfbb88c3ecb2d3dfb2","sha1":"3aec3ccc6de6864516356755d1cff2f12901d5a9","sha256":"b77d0656857d17cf7681d3b2a5ad3faf69b7c97da8f0824f9c94d93dfe265839","sha512":"071af433fa89564830699801a2113e0045101016dcc8a069963b675803d7998e83b6cabbe2aeb12af3fafe72f6747bb621d30248e35aa49e077be3b479728957","ssdeep":"","tlshash":"51d0a950bc080fddeebef87db078ccd6934ba011380a03d93c13482002aa1440de492e","size":242,"data":"","first_seen":"2026-06-19T00:41:43.876363Z","last_seen":"2026-06-19T00:56:00.264229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad65b9159a5c9f6082a70e88dee0e29","sha1":"39d5ddd9196ea0631d5850e5fdf303fa6c8f06fa","sha256":"316636e0c1f983642af435364b2283d7157e266d6a5c36529c6b41e2176f8a95","sha512":"cf5ece24c02c62c3c198758346c517123f3661dd8a5b53b3eb0ca34538cf6178e467be48439b96c345d3b664aab733bab704d7213737ca06bfa91fd5d2dc8805","ssdeep":"","tlshash":"b0c09b47f579154b04959105d386458c7264450d05365d352341609b3cf3f9d174d1bc","size":136,"data":"","first_seen":"2026-06-08T08:22:25.104796Z","last_seen":"2026-06-21T02:14:49.404164Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d18e9218749247f0425b09fd4c552d9","sha1":"5a0125d61bc57e2b527dc8722bd73d020b5343ed","sha256":"e7d0547aa709136fe92189f8c59db18440aeb59ce89b1cd6f54fd7c95d3b8dc4","sha512":"8c275fef679e7e9c92f8eca1f1ddca51eddfffa513ad9a91a9bea5929ce8a061bf6f8774e222c65b3bcdaed10181c4a715a6a717ff2cbb14f8f7e6878a9d69a7","ssdeep":"","tlshash":"69d0a76830c37210438e003009d29204242cb031f9035d8d3899ad6027b7f54bd9dc64","size":209,"data":"","first_seen":"2026-06-19T00:41:43.88216Z","last_seen":"2026-06-19T00:56:00.268454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1ad16bb558a79bf21f911433a8564f","sha1":"3441c871409e16d8003793a261d71e5aabb58dab","sha256":"de86aad74b41be44f5b6c1a7a9524d93b0bba8c167fb2271f5d354cb320616a5","sha512":"4d96616b4f19f0865ad206cb7f3b615aa4176286802dbe4e8885062c1555cf7e0677ebced4c459aa3249269f3c959a557da25fe44456747ca27a44f4e647b223","ssdeep":"","tlshash":"9f01fcc5ffae7503592671189b1f92d8113d93317c024c6dfd9c14562b5616f843c9a8","size":790,"data":"","first_seen":"2026-06-19T00:41:43.883281Z","last_seen":"2026-06-19T00:56:00.269044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"117f2fcb905b1f3e7e51dd31289c9675","sha1":"d1faf1542b21735e63a21a1d3ebd485ef88fdae4","sha256":"7ac0ce524371750f02238683b9f2d317ede7eeccb72e82d275893219d7393d29","sha512":"c7363aa6f06efb5e4c005dca8a416465a987e94a8fc878dd7d0247912d00ac7a82d9525a60b5f8c8b2a67e31cfea04f16030d3b7e6d2f81a652e7584a8c74e85","ssdeep":"","tlshash":"37f08b5d1d96b73092e5404c893be52826d911b9164ad845c8cdc90c5470ecf495f949","size":536,"data":"","first_seen":"2026-06-07T12:44:31.220748Z","last_seen":"2026-06-19T00:56:00.269908Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"1989b71e604bdaa77c5a52e727ffbdc3","sha1":"da8d70139984f0638c0c916f8b0e5fa427a224cb","sha256":"09f2530d4b92f594a78cc3a82abcedf1ded88b9dbb5720de53dd41f3b47e236f","sha512":"d072bb8a4392ca7c6cf6eff0128320e9c969291d2702cc3e84e2f77ab720e9e97bdaa985af97269dbbab551c293b1764486180f5aa3deafc0b339a6a0e1c2b78","ssdeep":"","tlshash":"b4f0c94d1cabb770a2e2404d8d3be52836d912ea2a5ad809c8cdcd4c04b0ede5d5e98d","size":522,"data":"","first_seen":"2026-06-07T12:44:31.222695Z","last_seen":"2026-06-19T00:56:00.270433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4320e24a02f2843120ec76919f080841","sha1":"7a0b1edd6be6120a024a660cbd3a210c9de00122","sha256":"6db5fb51512825598a3a07beafcedfcf99bde4dda6dde170e26039f8f2455425","sha512":"905b643440e1ad0da55f989a6a544e273946755ab632fadee9ffb8f5585b281b3bcd121682e95fa2b0dd784e99edb46dd6c1bce9a9ef994df3d7d7b3d5d7f6e6","ssdeep":"","tlshash":"94e0866a69b6b053423238848857a93fb962b162301c948154c9e480ff48f1eb41ae8a","size":307,"data":"","first_seen":"2026-06-19T00:41:43.886618Z","last_seen":"2026-06-19T00:56:00.272278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"25eb8fa666c4964ae9cb188ed49491c2","sha1":"45fbf984da0966ae9126c5b390f4da2a331398bc","sha256":"786da00e3b7ef013767bf716c5699c0f5c3a3eab68b32f0a22f9d0e4b9455544","sha512":"40d2e2b501b6eabf99022db4845106e0daeb4e22fa72396aca8af099aacafec7ab90d559f7fb4136d39cdebf9142280e3ba02aa8a5da816f3ed533397ec6ed46","ssdeep":"","tlshash":"bee0266c2a407d75aa5655e720f6de4c34b23024a549a850999f8c092a18d8ec829f5c","size":332,"data":"","first_seen":"2026-06-19T00:41:43.887883Z","last_seen":"2026-06-19T00:56:00.273754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.r_k3LN84WKM.O/am=BBCABg/d=1/exm=el_conf/ed=1/rs=AN8SPfo5ZLB90Mx41IgTn48WWoo1VCge1w/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad872ec12ca5b3736dd2e69be25b13b4","sha1":"e118d1bc4b4ab72ebe345edd3e9225403db243c7","sha256":"e32ad14596c11cbfe37bc3bb3cfa477b2923b1e1311887831aa5579be2027486","sha512":"8ca0aba0f9a20a00ce11e50fb9e1be1a4fcd714730b0d87f81910505758521753e690d5c9086a8716dc957e692589dca446f915593a577197541186c34187278","ssdeep":"3072:nGCj1EPEwTInYOj0tCnruYC0kuUc6bVoRCYVgIJ8vnquhZPZ1wiLdz4YqcN3JOkE:AtnH1cJQ1vdz4YJOV","tlshash":"d194d9cab3a378529262f8a1a47f0147b93dac57b44c4c6cb189d8db1eb08194573f7b","size":431207,"data":"","first_seen":"2026-06-15T20:20:09.235214Z","last_seen":"2026-06-21T08:07:30.752257Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-21T08:03:16.22436Z","times_seen":136214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-21T07:40:11.390244Z","times_seen":94748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/calcs.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"82a933e4d2d3ad97624f0424a46898e3","sha1":"cccecca534d9207b332476f9bab3dda7b5dc2a6e","sha256":"339c12db944041c30e4b382e7411ed338c96dc6c730a415a6b397157e06b1d7a","sha512":"1220a95d572655cbdf6eb2e33e2888c2f31eedcf8e558bdc7d9b1304385e740461a632846fd661f24ab5bcd06327686580b66bf325d54cc23a18e5a20d31f2ab","ssdeep":"96:MvfrCgMC8MJCPP/K1HXMfM+mH+qMFuNfX0kMFEDMxlhRTYwnIpbqY850WwVYgERi:0EDTFWntDeVtQRN","tlshash":"b5c1824e3a8d20d451c4917b783626b0f83df1358406ada37dcadf29f9c90978aa6f4d","size":5607,"data":"","first_seen":"2026-06-19T00:41:43.840275Z","last_seen":"2026-06-19T00:56:00.057544Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.cryptonator.com/ui/js/widget/single_widget.js","fqdn":"www.cryptonator.com","domain":"cryptonator.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.603Z","timestamp":1781830519603,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ui/js/widget/single_widget.js HTTP/1.1\r\nHost: www.cryptonator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cairo:200,300,400,600,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.422Z","timestamp":1781830518422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Cairo:200,300,400,600,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10572,"size_decoded":1462,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"b549171376018c7a86ea520d25bef69f","sha1":"ce15648c2c34d861ea5df79d1cca70e5539c4fb5","sha256":"e9b5e44377db8af103d95b34132ac8d3dffb506ec1799f5afb7893ef2f9617d3","sha512":"ffad21dee8595577030d20ff19d147dd3ae902a01a217b67b1da53b37c9c50f3124ab068f6bef3a1672af0453cb9f8874003d9e743978dae419d45471bcedaf2","ssdeep":"192:sbCl0374bClb3UlbCl63JDbClw338bClX3QqbCl132O:flulzlvlClKlp","tlshash":"1d229ed00c1e4184bf475dc2638d6e23ee0ee1956494886cabfd2b8b9cabc27739575c","first_seen":"2025-09-26T18:36:12.429285Z","last_seen":"2026-06-19T00:56:00.037389Z","times_seen":144,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed:300,300i,400,400i,700,700i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.428Z","timestamp":1781830518428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Roboto+Condensed:300,300i,400,400i,700,700i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15648,"size_decoded":1558,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4354f7439587032f0da80096bf6d54c1","sha1":"654fb608e466f0d058e372ab8fc7afa226fc6f91","sha256":"48980a0afe10d94ea3caf2616514789eb06d8017b391abe26aef7a22b313c3ca","sha512":"d243b0e2ae32cadac24609a8de34d57bf12478a419c9597ddaf6a8040bc83b54d675be8d6890381c1c5351788e6996b3d10c946619d985436e1f7d50d6e81f2b","ssdeep":"384:fNAPNlNAN1yN9NdNGEAPElEAE1yE9EdEGRAPRlRAR1yR9RdRtmeem9emcmQRmDmR:1oXMYf/zpa1ZCiycbYMDjtEuevPe9jNA","tlshash":"63627d95442aa404eb535cc22bcf7d36ed0e62157048c5b9dffd1ca8ace7e16235878e","first_seen":"2025-09-12T00:36:51.23647Z","last_seen":"2026-06-19T00:56:00.038685Z","times_seen":545,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/q/hashrate","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.118.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.837Z","timestamp":1781830519837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /q/hashrate HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncontent-language: en\r\ncontent-security-policy: img-src 'self' data: https://blockchain.info https://*.blockchain.info https://blockchain.com https://*.blockchain.com https://blockchain.info https://*.blockchain.info  https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://blockchain.info https://*.blockchain.info https://blockchain.com https://*.blockchain.com https://blockchain.info https://*.blockchain.info ; frame-src 'none'; child-src 'none'; script-src 'self' https://www.google-analytics.com https://blockchain.info https://*.blockchain.info https://blockchain.com https://*.blockchain.com https://blockchain.info https://*.blockchain.info ; connect-src 'self' wss://*.blockchain.info https://api.blockchain.info https://blockchain.info wss://*.blockchain.com https://api.blockchain.com https://blockchain.com wss://*.blockchain.info https://api.blockchain.info https://blockchain.info ; object-src 'none'; media-src 'self' data: mediastream: blob:; font-src 'self';\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: charts-bitcoin-core\r\nx-blockchain-cp-f: 5fnp 0.003 - 0d4545a4ea776d166db19cdb1f732cc2\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-ms: true\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-original-host: blockchain.info\r\nx-request-id: 0d4545a4ea776d166db19cdb1f732cc2\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=lcOXKRLgDQ7Ij98hZ_lLfoLNBm60y0IBOLkLgLt3PSw-1781830519.8526673-1.0.1.1-UobPLrYU09MVNDqH.mpdnuJnE9WkniaR2oUqU2VZiKo; HttpOnly; SameSite=None; Secure; Path=/; Domain=blockchain.info\r\ncf-ray: a0de914d1e02dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":2022,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"414768ccf9f46818e783ec2c54229fdf","sha1":"ca23930112bf6d717bfe4fa6ea489dc1a9767521","sha256":"21246ecd1fe81e1d5775e0a5d25740d8be89d6db1bab07927bf8dbabdecce1fb","sha512":"6ae8793100e9acabe09196c5798e608d4b750743479076054ab9a5c1328bac823f0f225010bfd478f4dcd7e5161b743a97fac9123fa12557f51aed0a8b384f4d","ssdeep":"","tlshash":"b360000003000000f33300000000cc0030300033000000c0330300c33ff000000ccc00","first_seen":"2026-06-19T00:56:00.039598Z","last_seen":"2026-06-19T00:56:00.039598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":125,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.610Z","timestamp":1781830519610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:57:02 GMT\r\nexpires: Fri, 18 Jun 2027 02:57:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79097\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8695,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-21T08:31:03.639846Z","times_seen":361062,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/plan-bg.jpg","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.703Z","timestamp":1781830519703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/plan-bg.jpg HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114426\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114426,"size_decoded":114694,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1458, components 3","md5":"73b9b280c8158ec6246bd4a75f9606e8","sha1":"298cb756939d43b6de56b2a24fc6e0e810000db7","sha256":"e1beff5a34a4f614c4dd98e6fcb05b771b9fb1b1008d896bbf4a8a6c9978df98","sha512":"5aa3d970c9342c375a6635b2322a12b6b63b3142333666218556c79e2d0ba90d8175fa95ce3a6dce708312373945f86f5500e6b2f2d8ffc82863e3015121a38c","ssdeep":"1536:r6CRKGBlDAl5clhGeqr5DUcVdGIFYwig/TbI999mCmG+lcTLZfOv3Q/AWEUD4Hva:OSKG7DGleXcVQwiroCPFUfQ/AWEZoth","tlshash":"1fb3023ae7d4df71e2cd2eb82de35608366304e4ec760bc74e942012b5ba7166c58b87","first_seen":"2026-06-19T00:41:43.607158Z","last_seen":"2026-06-19T00:56:00.042046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.305Z","timestamp":1781830518305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2415,"size_decoded":1451,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"937c0f60d71292a5a8d1cbdbc6c80621","sha1":"3a15491027d6ba63d9720887c07b9677aa405a16","sha256":"109ce15b2cae910659d99ca36afcbdc552669aac69736f67af8d552e0e292117","sha512":"9c7c3bb34a0cc0ed674bc891e4007e5068c50658f104157ef46ba909230b2eb8901d2436240d7785417347ffc021dcf5786b55d3e6253aab323fd28e33a54beb","ssdeep":"","tlshash":"53419ef3401ea84897a31cca23de3e369e4f65106186d17adffd085cec75c2a5264b1d","first_seen":"2025-09-11T21:22:52.791197Z","last_seen":"2026-06-21T07:25:01.181087Z","times_seen":2784,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":35,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blockchain.info/q/getdifficulty","fqdn":"blockchain.info","domain":"blockchain.info","tld":"info"},"ip":{"addr":"104.16.118.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.839Z","timestamp":1781830519839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.blockchain.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:59:BB:5E:61:8F:0F:CE:ED:F6:0D:29:AB:7D:AF:12:27:18:43:A7","sha256":"A7:F0:DE:39:FB:63:5F:27:FB:24:96:48:D8:A2:1B:D4:1C:A9:CE:A6:21:11:AB:5C:51:AC:0E:6C:B0:45:23:48"}}},"request":{"raw":"GET /q/getdifficulty HTTP/1.1\r\nHost: blockchain.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:55:23 GMT\r\ncontent-type: text/plain; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncontent-language: en\r\ncontent-security-policy: img-src 'self' data: https://blockchain.info https://*.blockchain.info https://blockchain.com https://*.blockchain.com https://blockchain.info https://*.blockchain.info  https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://blockchain.info https://*.blockchain.info https://blockchain.com https://*.blockchain.com https://blockchain.info https://*.blockchain.info ; frame-src 'none'; child-src 'none'; script-src 'self' https://www.google-analytics.com https://blockchain.info https://*.blockchain.info https://blockchain.com https://*.blockchain.com https://blockchain.info https://*.blockchain.info ; connect-src 'self' wss://*.blockchain.info https://api.blockchain.info https://blockchain.info wss://*.blockchain.com https://api.blockchain.com https://blockchain.com wss://*.blockchain.info https://api.blockchain.info https://blockchain.info ; object-src 'none'; media-src 'self' data: mediastream: blob:; font-src 'self';\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-blockchain-cp-b: charts-bitcoin-core\r\nx-blockchain-cp-f: 5fnp 0.002 - 6be817facdf0d708ad7b2ef90ed07445\r\nx-blockchain-language: en\r\nx-blockchain-language-id: 0:0:1 (en:en:en)\r\nx-blockchain-ms: true\r\nx-blockchain-server: BlockchainFE/1.0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-original-host: blockchain.info\r\nx-request-id: 6be817facdf0d708ad7b2ef90ed07445\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nset-cookie: _cfuvid=Ji8mRmobpRplvYei9rMwBC.cE2dp3a6HXRQ0Xu1z6OU-1781830523.204584-1.0.1.1-DgqHmt75.A5z8MPLtz7wAf4oBlfLwritOZovrsUqxJc; HttpOnly; SameSite=None; Secure; Path=/; Domain=blockchain.info\r\ncf-ray: a0de916208f0dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":2028,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4a7b7bb6fc66483d11f24ac1b3b42ba9","sha1":"5029186bfb5b8cc863e67dd434ff2b98b2c8099f","sha256":"06f80d65fa87aaf5da9bb622cf1d5e85453220354a46bd9bdd72abbba2048cd6","sha512":"b4dbf64442bc83dd8e0421e97310df047dfe5db41f1ea77081c1a7bc25c43808219cae79cdb9f8f1cb4ea6a20649d80f36b078d039db5dfe6d2048f01589dbce","ssdeep":"","tlshash":"087000082200e20000000c8200800002803000200ec8000b002002c2028808a0e08003","first_seen":"2026-06-14T04:14:53.139039Z","last_seen":"2026-06-19T00:56:00.044307Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3420,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":52,"receive":0,"ssl":3362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.367Z","timestamp":1781830518367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32322,"size_decoded":2573,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3f6187050711d9d74b8ab25b3f6e5200","sha1":"59d0b38cd2de57d87a5ebd2e65ccd4c387be09a6","sha256":"37a382460785c3cad353e529a56ac0b131c21426e73cdcb3392d52ccf2354444","sha512":"d733796dd0b4d2547b65764fa7568579e95cf81578f5bf3beefdd9ac14a79e80dd4040b1582cb7ca13118ef144c575aa4bdad30714d118d0690087dc559119a0","ssdeep":"768:DFZFCFHFHFY4FRLFuFWFMFsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUb:9HIHTxj","tlshash":"78e20da10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T17:02:37.659039Z","last_seen":"2026-06-21T05:12:30.070821Z","times_seen":1076,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sora:wght@100;300;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.404Z","timestamp":1781830518404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Sora:wght@100;300;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3272,"size_decoded":1105,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e1e6d7526e298eccd63f0471d4f6ebbb","sha1":"9b81118c9541ad9df8270cfc88cfceef13815139","sha256":"e5f733f4e6d27a90687aeb277e3b4357d81e0a680041d7533b457d672c05cd98","sha512":"dc94fc4c61bf46146c99478908d28bcad0d1437101c591ee76ac45991cc192cd0faf5295063761433bdd78f0e11d6f7f4fbe3eac01fd4dd617ffa45570812e8d","ssdeep":"","tlshash":"5b61d181086ba504ebe31dc132ce7d37fe5e6151a845d938aefd1888fc9ec2a5361b4d","first_seen":"2026-06-19T00:41:43.839066Z","last_seen":"2026-06-19T00:56:00.04633Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/manyline.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.234Z","timestamp":1781830519234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/manyline.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28175\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28175,"size_decoded":28441,"mime_type":"image/png","magic":"PNG image data, 509 x 509, 8-bit/color RGBA, non-interlaced","md5":"0a027bd1cfe2e731e6b316c3848cf079","sha1":"78b123c2c2c4b785f00b9983fda55d6102208263","sha256":"fc567db16d50e8271ad6d83c8a445c9f8578538e5eeca61d285a002a9b0e3da5","sha512":"73459096bbae7359a3290a4a94194f0025322983548db3267b9629982af7263a990b4ac0a49ed3d2ec7ba87327b7e7a7d30f770046c2e108fd9f7c446212544d","ssdeep":"384:fmm1KU1OVZ/O/7wGYPqRRqf0PlScvQabwrqg7KVdChSRUT9sWVsd6u0lUin671T6:+0as7wrgRqoRvQqwe3oT6MjgamFYE6","tlshash":"1fc2d0917d3e52c1898376533b8189f61b152718129e49ecf4e5f3f3a1cee2aec29274","first_seen":"2024-08-19T17:11:42.508562Z","last_seen":"2026-06-19T00:56:00.046934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=paxasfinance.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.767Z","timestamp":1781830519767,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /serve/v3/coin/chart?fsym=BTC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=paxasfinance.com HTTP/1.1\r\nHost: widgets.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.364Z","timestamp":1781830518364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28970,"size_decoded":2583,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"328a662db3e49d1a97e74cbfc579969d","sha1":"0d1bf6a062676bbb124f372e6a0336fd18bf1dfc","sha256":"424e21de2cf3baefa0efc8379fc58703d5c5b860beae3a1e715bb08b6b37b1dc","sha512":"514a75956b1d16addfbff9aa8383976a5d5d80d3eb002fd31f8f004ada796de209cd79cc4a604172a607c484e74964628e7404dc064fc63b5135f3c57971a3a1","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIwr:0AYqY4tjXqY4ahhqY4tU8qY4FX7qY4o","tlshash":"2bd22aa00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T06:17:00.274093Z","last_seen":"2026-06-21T02:38:15.40603Z","times_seen":5769,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Exo+2:100,200,300,400,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.433Z","timestamp":1781830518433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Exo+2:100,200,300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16569,"size_decoded":1457,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"35dd69f41e92f03d3fb42d7115f2fb32","sha1":"bccb6692c7533456258b58e71bc867b0552ec79f","sha256":"96a69d06f42bdbdb6bf1407a14b74092bc464d35aa028de62b3ef4fbfdd1dab5","sha512":"1662f0a9dde2187385942b41186882b96af0b34ec30a574d78a8cb325e4a2ba620fd45520f49e08e373911bc0ef5c962683f723b6073d10ac33a9ac28e9143ea","ssdeep":"192:4ppIpRHXpBpxyp8pBRHgCxrDpSRHHxxEipzRHucx5RpsRHtjxK4pVRHkmxn/p2Ra:4/IjX7Oa7PUxlTexHnQpRT69","tlshash":"b4728aa0042bd400ab571dca63cf7e3aad9e7125b480c57a5ffd1ce8acdad62136871d","first_seen":"2025-09-21T02:05:08.010879Z","last_seen":"2026-06-19T00:56:00.049524Z","times_seen":33,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-9.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.913Z","timestamp":1781830518913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-9.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6603\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":6868,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ec45f61721cb29c0185c0708523f6b7d","sha1":"fd1bae0054a8e6f530bde2cecb903e4b7294c5ee","sha256":"f1e5eae4717f3545b6ecf93cbf038b29401e2d62a5e7cea55491d790d8aed645","sha512":"839241edab4c6ff0ac917087d8b353661acead07341967561255e974d02fcd591b3eae7cbd150f53d2f0ecc483af7626835c83e4997e2012e8a3774edeac48e8","ssdeep":"192:B5WO9jtzsxQ1zboKA9L6H1SJWu+kIUR5BX:T9jtzWx5WcJFpX","tlshash":"9bd19eb6d9ff087968a20e0a4f1e9375d99005149d7b04fc2636e029f9c69d073e2eda","first_seen":"2024-08-19T17:11:42.48682Z","last_seen":"2026-06-19T00:56:00.052487Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/workbg2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.685Z","timestamp":1781830519685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/workbg2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2617\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2617,"size_decoded":2882,"mime_type":"image/png","magic":"PNG image data, 130 x 145, 8-bit/color RGBA, non-interlaced","md5":"740ca946f6dbfae5798b9da56de6ac70","sha1":"dd5ad3c28c3b85a00df03af7c0dc00dfcbb961a6","sha256":"4f7176bace6af7a9802055971d60a662fd1d22ecea4b84a412842555d15397b5","sha512":"adf9a8179d7d48a08762a12122b3df6142f758a31ae7cfb8e6a9c17738d4a00dbe460a9b044e0b668539bec3bac87c2b2a0c08c81091f9bc4336f2a07b66a5a8","ssdeep":"","tlshash":"1c51098eab0169a41088c89224f5b6325f28b040d8d0f49b7bafc996dd343e1c4f36de","first_seen":"2026-06-19T00:41:43.532476Z","last_seen":"2026-06-19T00:56:00.053305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/workbg3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.697Z","timestamp":1781830519697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/workbg3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2619\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2619,"size_decoded":2884,"mime_type":"image/png","magic":"PNG image data, 130 x 145, 8-bit/color RGBA, non-interlaced","md5":"29430529b3f3e6c971feed0e3bf61076","sha1":"0d489dd1e5e038aea821a65bef867d952e3c9983","sha256":"3c26e6d669b068d5359cffd2591f3465934dce3f177c69d892b6247b26b68d59","sha512":"f7d992bfda7c21e288a1c4e70faca35ccf083bd546784c9e56dd7c9ae8b16ee425cb4c549595e1233a6a0c1449191677293b7503bd7dc551554abaf4cbe71472","ssdeep":"","tlshash":"0051195da60a29026c4ee55624f10a378f159dd081e4a0ba1b6ac11a692c7fad1fd2cf","first_seen":"2026-06-19T00:41:43.578888Z","last_seen":"2026-06-19T00:56:00.054334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/hover.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.326Z","timestamp":1781830518326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /hover.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7703\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":118881,"size_decoded":8012,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1c4339ab4e4dcffc827ae56995d24b1f","sha1":"b9a07803a0f33ec1f514c6f48ccfb686cde6507b","sha256":"9e7142abb929f1743be3fb442273dd1278e9ad91f07ab6d11229888256edeb7d","sha512":"c9b9614da3031e02fa398b809e646584e1f0b91c38e29afa8a94c4dea7badc98f826fd7187deeb8e49837f0ae063a2a915e7b166c8fd6160c631a87e3afa0f8e","ssdeep":"1536:hIII3PtSon2WoC2jYAYoYSYDH0N33kJmuyoqsgQwWBNxv6lkrRIEIlN:Von2WoC2N","tlshash":"cec38eb96941210417334f18c3ca5fa9eb3cd0a3aa211ee9b747584bcf52e5c53cae67","first_seen":"2026-06-19T00:41:43.871709Z","last_seen":"2026-06-19T00:56:00.056075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/calcs.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.453Z","timestamp":1781830518453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/calcs.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 832\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5607,"size_decoded":1068,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"82a933e4d2d3ad97624f0424a46898e3","sha1":"cccecca534d9207b332476f9bab3dda7b5dc2a6e","sha256":"339c12db944041c30e4b382e7411ed338c96dc6c730a415a6b397157e06b1d7a","sha512":"1220a95d572655cbdf6eb2e33e2888c2f31eedcf8e558bdc7d9b1304385e740461a632846fd661f24ab5bcd06327686580b66bf325d54cc23a18e5a20d31f2ab","ssdeep":"96:MvfrCgMC8MJCPP/K1HXMfM+mH+qMFuNfX0kMFEDMxlhRTYwnIpbqY850WwVYgERi:0EDTFWntDeVtQRN","tlshash":"b5c1824e3a8d20d451c4917b783626b0f83df1358406ada37dcadf29f9c90978aa6f4d","first_seen":"2026-06-19T00:41:43.840275Z","last_seen":"2026-06-19T00:56:00.057544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/whitedot.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.874Z","timestamp":1781830518874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/whitedot.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 303\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":303,"size_decoded":567,"mime_type":"image/png","magic":"PNG image data, 93 x 45, 8-bit/color RGBA, non-interlaced","md5":"e18e7fece6fc8d659818d38d9af82d12","sha1":"10df0e5627e2a78ac349fd51e22085386841e922","sha256":"d69ee10039343a56f7a67b4996548a555e721a016543a075aa105864f3eeafd7","sha512":"baf0d2c11fe7498c0af15edfc84e911553197f89930ed333d16d940b0cf02a0bc9827be25073cbfa01eb3beec676cb3c4ee7c76c959f2b3d3085826bc5556ebd","ssdeep":"","tlshash":"d2e02cc9b370ece5d469187e9b3014e4cae54230e50a888cba29c5764828b88e100886","first_seen":"2024-08-19T17:11:42.500426Z","last_seen":"2026-06-19T00:56:00.058314Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQbuFFYT72XzQUpDg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.817Z","timestamp":1781830519817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/sora/v17/xMQbuFFYT72XzQUpDg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33652\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 05:04:22 GMT\r\nexpires: Fri, 18 Jun 2027 05:04:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 71457\r\nlast-modified: Mon, 08 Sep 2025 17:59:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":33652,"size_decoded":34464,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33652, version 1.0","md5":"0d0e5e4d2f9fef29f3aff5e8e0e659c4","sha1":"93f322133a56cd58cb13fd9d3e3555426875e255","sha256":"fa26406eeda9a3c6ec3d9ea8813c3045d6dc755e30c716d5c094e8ef43be5a7f","sha512":"5b62778ffd0054b895ddb493ff46f760f96d0dcbc6e171466ea5497c02ce02c7a12238ebde1e73c7e95530634a0eab7fe1c4f1ca9d24f6f54cf6a9e9d9bab9f2","ssdeep":"768:ROxePX1Sw4LXk9Hj8lO1W87tUx7HfPrKF5:RBdS7jk48W86xL0","tlshash":"64e2f15d7d932490c4b41899c6e20e56eac508e1bad5ead3ff1b0d0eb71a4f4ce4e1e8","first_seen":"2025-09-09T08:23:20.681058Z","last_seen":"2026-06-21T07:31:01.079436Z","times_seen":3214,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.647Z","timestamp":1781830519647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-latest.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1762a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\nage: 1850077\r\nx-served-by: cache-lga21983-LGA, cache-bma-essb1270055-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 43985, 23973\r\nx-timer: S1781830520.649356,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":95786,"size_decoded":33843,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-21T07:08:55.948855Z","times_seen":52971,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.722Z","timestamp":1781830520722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Jun 2026 21:31:59 GMT\r\nexpires: Sat, 12 Jun 2027 21:31:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 530601\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-06-21T07:41:47.14171Z","times_seen":13828,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:400,500,600,700|Titillium+Web:400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.309Z","timestamp":1781830518309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Oswald:400,500,600,700|Titillium+Web:400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10056,"size_decoded":1436,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6176535aef027047d4d25f5a70554737","sha1":"02bd005af8538dde35479f1aaaaece851f2033e0","sha256":"0143a44fb628cd03a17ffdde89942de8e6ac6a6fa9675fd4ed2ba716fdeca200","sha512":"5e33b62a5e571aaada1438a59ce2d3a92d257399ade59473159fbe6fbf48d91f0d80f7c36d5d65b090133503e7cefdf853d07c0a9c8ad8c7f8495a7b893b2298","ssdeep":"192:tW9KaDsHmWaK94sc/WDK49sBUW4KDasOJZq4YIAKATKP:0wZTXWt54rP","tlshash":"2e22e062082fa480ab470ec633ce3d379f5f62552054d5359ffd1ca8ec9ae26135a78e","first_seen":"2025-10-07T03:56:45.690388Z","last_seen":"2026-06-19T00:56:00.064086Z","times_seen":12,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":32,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.474Z","timestamp":1781830518474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.3.6/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"2f624089c65f12185e79925bc5a7fc42\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 10/12/2024 20:34:21\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2d9ac5d9ba43e26bf0a4c0b8dd0649ea\r\ncdn-cache: HIT\r\nage: 3128426\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0de91447dc11a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121260,"size_decoded":21230,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"2f624089c65f12185e79925bc5a7fc42","sha1":"8eb176c70b9cfa6871b76d6dc98fb526e7e9b3de","sha256":"eece6e0c65b7007ab0eb1b4998d36dafe381449525824349128efc3f86f4c91c","sha512":"9cda3ec821c4ca7d2c98cc52b309dffce9d7ebf2b026e65394d6418dab8a8532b473ecd3faae49382c7450585743aac947d8e0e84b3c80fb83dae65c6032ea4b","ssdeep":"768:ly3Gxw/jc/QWlJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:Xw/o1BIuiHlqLmN8lDbNmPbh","tlshash":"4dc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:20:05Z","last_seen":"2026-06-21T07:39:17.118475Z","times_seen":17990,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/plan-sub.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.705Z","timestamp":1781830519705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/plan-sub.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3736\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3736,"size_decoded":4001,"mime_type":"image/png","magic":"PNG image data, 242 x 64, 8-bit/color RGBA, non-interlaced","md5":"703569e1bfec1bf0427c71bb38609a22","sha1":"9b1d9bf46cbf289bbdb67a65790f23e19061a5d0","sha256":"8868b92b2123679309cda1efdc7495be10547fba3edcdfed0ddcb37aa048fbc4","sha512":"3b35e93a16d47c83f222c693cac11077ed469f877b17b3d6ac10fa7d9abdeffa104dd8a05cf508217e25e41ba5e0dc8f86c59dce238d0557fb9dfb137e24d99e","ssdeep":"","tlshash":"d6718d72f8c5ab11a09c2c8244f1021b6c2552d1e8a8dabf410ffc57dd102fd682ddca","first_seen":"2026-06-19T00:41:43.86011Z","last_seen":"2026-06-19T00:56:00.065371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/stabg1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.811Z","timestamp":1781830519811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/stabg1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4623\r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4623,"size_decoded":4888,"mime_type":"image/png","magic":"PNG image data, 104 x 116, 8-bit/color RGBA, non-interlaced","md5":"888ce104755e5a2098add83232c7b3cd","sha1":"996fef4c5901a9112b27b6f89dc468530bcc9c43","sha256":"6e42f066f4e62bcb43feb2ff675ebed522e671292137f1cc14261c944d340cee","sha512":"7ec0d8f95e62080096dd18926ed64caf55b76ebde916d0443d349803cebcca608c741ed270dcf9a4b20aee5752f3c595de02025d2765a2c6b4a267916082d37b","ssdeep":"96:4Qt+mtUFT9CTvSoXmIP59wrCgWRS5PI5OVCx848:4gvzXNRSrCg0SthCC48","tlshash":"e0918dded801214057f4e87345eb5c019add8e989be0c898208bd0492e6f6f9047e7cb","first_seen":"2026-06-19T00:41:43.65843Z","last_seen":"2026-06-19T00:56:00.067922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=PT+Sans:400,400i,700,700i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.362Z","timestamp":1781830518362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=PT+Sans:400,400i,700,700i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5462,"size_decoded":1302,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51e7af3343e9e8c6a79241bb21d41591","sha1":"fa3950ca4f3ad8606c0ffb792c8ec49354187955","sha256":"0196f25e3eb17b2d5bd7a6e7698d4a525937de3c10948c31fa56492bdf1fc1af","sha512":"6df5860a0caddaf415953f42a24273028cd380f54788d3b409328df38504489578e6c63f97e1494787411e5c7911f92fa196a979b6a3c1d005d3e838cbb44356","ssdeep":"96:RYgLvhYgLyFZOYgLyJc+ucYgLhNMYgCchYgCwFZOYgC/Jc+ucYgCD3NMOLohOLq7:WkvGk8kawkBpcGpapbwpboE+laIGJ7PY","tlshash":"29b1bf92052be584ab831cd533df7d32ce1e9294304998266aff1cd8fd65d2a8370b5d","first_seen":"2025-09-05T14:55:06.451035Z","last_seen":"2026-06-21T05:47:18.925916Z","times_seen":2026,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Asap|Poppins:300,400,500,600,700,800,900|Source+Sans+Pro:300,400,600,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.374Z","timestamp":1781830518374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Asap|Poppins:300,400,500,600,700,800,900|Source+Sans+Pro:300,400,600,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21425,"size_decoded":1901,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dc0a31b344de81d471b6af6f53517980","sha1":"a7be80c85dbbc289ac2308594739102534891f96","sha256":"7b722a1faaa50925b6f6d6fcc311771a2d4fd54a43f32ee855895217b92cb55f","sha512":"e9e2edf5e0b2310557a4dc7c34928b37b375d33a1ee3c15be2f10ec086469a1b51d3216f2d18b58b0f2b6bd18961e3d1238ee4bab1cf9c6e9ac282291bbd8b04","ssdeep":"192:cP6Bvq6BOm6BFjH/dCKSe1rV3HwwVzzbtwpOgoaBkn1Cb63gYIv3q0eb83JLXCpl:cyBNBkBffPkMe6jZr7","tlshash":"41a2eef2442ae40867931cc623de3e36ae4e61147045d57aaffd1c9ceca6c2a4375b2d","first_seen":"2025-10-27T04:07:10.689854Z","last_seen":"2026-06-19T00:56:00.069471Z","times_seen":15,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.452Z","timestamp":1781830518452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-latest.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1762a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nage: 1850076\r\nx-served-by: cache-lga21983-LGA, cache-bma-essb1270055-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 43985, 23972\r\nx-timer: S1781830518.492910,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95786,"size_decoded":33843,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-21T07:08:55.948855Z","times_seen":52971,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/logo.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.876Z","timestamp":1781830518876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13356\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13356,"size_decoded":13622,"mime_type":"image/png","magic":"PNG image data, 266 x 75, 8-bit/color RGBA, non-interlaced","md5":"5cf6feca4647d9b9a87a7993ed243123","sha1":"c15a031b5a4e457938c684bb521369552568576a","sha256":"5409becd21497cb86d80f3c5b8aafd2f8525491380bca0f8ce0114b83abbb243","sha512":"a5a9e88c3b821acc6a7e6a8009f0b9cb68e2f98d3037c9d2a6c9a2c5d7bae535fdbd6d5e9a800b587fb0c9314a3fb7b5042d9360bdf4c09a5f77b5d83e2b7e0a","ssdeep":"192:V9sTdjk3jEq+hPVkxfzCCbMt7hkOxgCpb4b/vhBkBAm6c/a7q7D19ckWjQGv:ns5jQUhP2zKZCkiBkac/2q759c5jr","tlshash":"8a52c026d2cb167445c786d080510f860d03086f3938eb126e3dd95d8a6a9e79ffdfd2","first_seen":"2026-06-19T00:41:43.806048Z","last_seen":"2026-06-19T00:56:00.070294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.735Z","timestamp":1781830519735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Jun 2026 18:12:11 GMT\r\nexpires: Sat, 12 Jun 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542588\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-21T08:33:23.116479Z","times_seen":290138,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-6.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.907Z","timestamp":1781830518907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-6.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3312\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3312,"size_decoded":3577,"mime_type":"image/png","magic":"PNG image data, 143 x 143, 8-bit/color RGBA, non-interlaced","md5":"9c89aac6f8fbef8fc65fb244504236f9","sha1":"2376f241f0c0424cca27ad84cbf1d159ea986677","sha256":"4c58953bb7f34de5a1f571a6080948224caeba8ebc4818b49e22c3d14082b016","sha512":"6b5c52f5f0275db7b795b48640260a694d658dcd7ab519491b2a0adb895549694b57293d2d411caae10bf6f191e2fad8baadc8607b99bd18b8092fb1a653a50e","ssdeep":"","tlshash":"f1617f43054cd68cbb951e4199fe88f9a776c16ca16c4ecb45147163c02a4fd9fc4f74","first_seen":"2024-08-19T17:11:42.484649Z","last_seen":"2026-06-19T00:56:00.072988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/popup.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.345Z","timestamp":1781830518345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /popup.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 654\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2230,"size_decoded":962,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"22f4824c9f97454384b040ddaf4c6c08","sha1":"46b9630088caaaa8692098996840993776b8a1e6","sha256":"c2d93ae505d7b2d81a8a05381c757a363fda340a524b3c6693b1c5bf99b6c573","sha512":"b19f2f9acaa3fc9cf0c33d85981603a24742be3c667691983824cea21ce3436ec3f4439dab8f4983900f5c8c47092b21ae49b54334d6dd48284f8fb19dc41d3b","ssdeep":"","tlshash":"5541434edaaa5108b33bec2577b35fb09d188072de0f03a8bdf03a28a64547a55617dc","first_seen":"2026-06-19T00:41:43.675175Z","last_seen":"2026-06-19T00:56:00.07365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/owl.carousel.min.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.337Z","timestamp":1781830518337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /owl.carousel.min.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1182\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4675,"size_decoded":1491,"mime_type":"text/css","magic":"ASCII text, with very long lines (2088), with CRLF line terminators","md5":"400e291349a7b6e23b8c227b9bf50974","sha1":"a3e5524c2e69b5bfe57b2b7e6a133f8c733e5389","sha256":"742d2448eb01572af23cb998ba1769c00fcade2baabec419921964f363fec57e","sha512":"fb1c438b238b57f8ac364359ee28012ab51fe0519bcef947b3ebe00bc7bfa07cd34424ba91b04dce4da06ffe2e68641e79420d7e60757d12eafc7e35fd2d0720","ssdeep":"96:3QtyhT6eA5AbdEK7pcXVxZaIJICNMCycRBWDk/e/4:0WQ5c2KxiTMCVRBf","tlshash":"bfa1ffe5350a214f592f83111be80e86a93d8913c9260959b3f7d3148ba9a2c117ffcf","first_seen":"2026-06-19T00:41:43.665733Z","last_seen":"2026-06-19T00:56:00.075434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Bai+Jamjuree:200,200i,300,300i,400,400i,500,500i,600,600i,700,700i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.349Z","timestamp":1781830518349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Bai+Jamjuree:200,200i,300,300i,400,400i,500,500i,600,600i,700,700i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18196,"size_decoded":1553,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"921a14b091ae9ce687f38d0cd6d4a649","sha1":"5a50f2762dc5d18d65d42b05ac9cbe89f0598b67","sha256":"b52ccbd005d8a5aa7a89b99cd1bc6324a0dd6b8996d25790dc410826ae3cc796","sha512":"69c6896d87e7c481cc772e42488b65890e3c3e0877d8c330d3d60b11f60c3082043e1ef8942fef7637d7725f75d459ee53886a8da52c7effdd5ce3bb1b35678a","ssdeep":"384:DkhJkE8hBMMNhH4iqhL26yhzOSNhgho3nBOSInK:H9","tlshash":"a382c0a10426e640a68b1dc162cf3c3acf4f71a57441c636bbfd0cadadb5d2263a674d","first_seen":"2025-09-28T22:18:11.603949Z","last_seen":"2026-06-19T00:56:00.076239Z","times_seen":28,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/jquery.fancybox.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.584Z","timestamp":1781830518584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/jquery.fancybox.min.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21008\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68265,"size_decoded":21246,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31972), with CRLF line terminators","md5":"003e7d1be42767dacd59bd516082e9e1","sha1":"eef46b6fb2e460838cd7328a6e13ecda0cb1e194","sha256":"1c02caf2a0f16318965676fd4b265265728d64fba2794a20b07151a4e891fca6","sha512":"db34017f292b287cf5e4c263a6421d76075f06441fb11444130a50446fae25357db8867e087e291e9de2ef8538ce949948887835b89f54c59ec3bbd37f88b298","ssdeep":"1536:bVzfGevmRzMMdZfupgfjJ3kSEO261NyYMk5Sl5BSENUfmqxGcTJ7PBTf:dfGevmRzMMdZfupgbJ3k+NyYMZlvZqxH","tlshash":"1563089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","first_seen":"2023-03-07T12:39:16Z","last_seen":"2026-06-21T06:55:56.342859Z","times_seen":2898,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/circle2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.859Z","timestamp":1781830518859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/circle2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6148\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6148,"size_decoded":6413,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"5ba50cd914da2dffe19a1d59802e1c32","sha1":"2e35df0ae4acfe61b73d010ce0d0e86326e52c29","sha256":"aa5a73b31ff97f271d8ea3f433e188d0c30211187d5d88ccb62b42eb67c09d08","sha512":"ce2a66cb3fa8d40854075667d1c3e8c67d56b7e5a72e7e2673bcc81263dfb4d83e36f28f87f6abb382baa3c871a6b4a40bbfc81688e412172e45c8799b32c465","ssdeep":"192:d6C/jklahYmJYViuDVEqrW6Oh8MCt2hQODB:p/YaMVitD6fMK2D","tlshash":"e1c1aefa1eaf2cd9829d66de2d260d800625b989ed41ed801c066834cd3a5413b3ff5c","first_seen":"2026-06-19T00:41:43.743023Z","last_seen":"2026-06-19T00:56:00.080069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-5.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.906Z","timestamp":1781830518906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-5.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1941\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1941,"size_decoded":2206,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"8a3752bd48fbd5b68fe3b9d1f5e5c6ad","sha1":"8b441536d4f44dd09116e8c8af63d5870836f5c6","sha256":"6b89dbd7f6338320460ba0ea84645e69f948248d82bec258a9c4eff6c55260a3","sha512":"d34ba5dbf3f85a4f87fc3bd184d0ea2ad87555c5e45038bb8088d62ef238e879e9d41794b3195cf1ff90edd39ff9f48eec4e57179ffcf9efd7ca33cff66064fb","ssdeep":"","tlshash":"02412a8163aacec296e030664c16f75b78f086edabe6253ad22210c6228075c01b3fa1","first_seen":"2024-08-19T17:11:42.476394Z","last_seen":"2026-06-19T00:56:00.083547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.719Z","timestamp":1781830520719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:54:53 GMT\r\nexpires: Fri, 18 Jun 2027 02:54:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79227\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1597,"size_decoded":2270,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-21T07:41:47.227166Z","times_seen":14183,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Saira+Condensed:100,200,300,400,500,600,700,800,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.371Z","timestamp":1781830518371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Saira+Condensed:100,200,300,400,500,600,700,800,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11271,"size_decoded":1350,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e819369cb79268f0d97063fdc55b8d46","sha1":"40c3d5f26fc6daf3511f72bec4899af189331088","sha256":"40a2acdd93a3964fcb01a7e121b974bc99a0575e31e4bdcff002b4066956679c","sha512":"a11ceed99d8fb9a0446572d634498a7ffeee574a2a985f8109f008eb847f573cace14c550d1c8dad10e57efe9111cd0af0ff73ac96366b7db328c14a724fa459","ssdeep":"192:cw787jV7Qb7tkkvwDJPwZ3j3ki3zmvDly/EBA4Uy8rX9Ote8a3/RF:cw4dslbXruwEs","tlshash":"d5322fe0043a9504db536cc21bce3d329e4e6200b049c93a6ffd1c99ddbae2a632d71d","first_seen":"2025-10-03T09:22:13.393691Z","last_seen":"2026-06-19T00:56:00.086311Z","times_seen":21,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/work4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.031Z","timestamp":1781830519031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/work4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5579\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5579,"size_decoded":5844,"mime_type":"image/png","magic":"PNG image data, 88 x 79, 8-bit/color RGB, non-interlaced","md5":"cdfb88a12c9453f4adcda29b616aab22","sha1":"2f5260e0993de5bb0be598759a2bcb4c4c40eca4","sha256":"9fc31b5d6faaf1cd60efee6393911a9e0be48a6e17ab000d1ad80766ecfeed9c","sha512":"a2b5b21e6eff1b7cc36d04c0bcc01a52c2d06d8bdf8a2b962b0bb1ced9e1ea765255953e55628b85e3af2dbc559b59648790a56476ac74dc7df3ef582e1c3a0a","ssdeep":"96:TQt2mtUg83QmWFSvVAUjMFjixlHVI5cqLOsnkmw9DgUHZmOtduoJ/z3o:Td3Qrcm35nOf9DJ/E","tlshash":"fcb19eebf0863c128919fb04c4cf846d5e8009c68fa3a928795dc1025e382f6d4ed7b6","first_seen":"2026-06-19T00:41:43.584287Z","last_seen":"2026-06-19T00:56:00.087404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/footer-element-two.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.220Z","timestamp":1781830519220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/footer-element-two.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7071\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7071,"size_decoded":7336,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"e7f9c9955e7d2377fbfb7424567d7472","sha1":"54eabbdfe0be6da62518d67913bdaca4da727445","sha256":"8a5e963b559c54ba31d324a290017df9cfe174a21352321eb43022c339e9db0e","sha512":"34b50f7122c7604c9a4945d05944ed1d2cb59d044c6b11e7baa5c410212bb76058567938261574dbac5d8ea3534cd915beb953e7bb554daa3add81308e1a97c0","ssdeep":"192:sxx2BT4hC5daL9S7X1qSfDDoT6mwL0RyX+Rn6QPNmQMqdog:sxx2B+BSZqwoT6ma00ORN5v","tlshash":"fee19e92edf89c3e8936a76d612d6ad945b820dd0f98e6821c56c0b1098870b9ec33c5","first_seen":"2026-06-19T00:41:43.763848Z","last_seen":"2026-06-19T00:56:00.089018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Bai+Jamjuree:200,200i,300,300i,400,400i,500,500i,600,600i,700,700i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.435Z","timestamp":1781830518435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Bai+Jamjuree:200,200i,300,300i,400,400i,500,500i,600,600i,700,700i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19252,"size_decoded":1565,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c7eac56b5f88743d29459066d6ff28ef","sha1":"9d0b72811da73d19ee52f3d3ec26d88417d5f689","sha256":"cc39b69efb88d7be98b58a7445084f424692bf1b0f95a63721ef73da8ffa2ec9","sha512":"6884df7d08066dd11a4529ebcfc94db9dd3bb701ee5609bdffa0ca1a3d3b84d43ed0e4c9ca2c3be0e32de0f458a69fc8528be74bab3fe6768b42a8b6bd835d50","ssdeep":"384:DKhrWa+hPa+rh9K4khJkEYht4ILh6TAtttO2k7U:VX","tlshash":"f3820f900026e700ea4f1dc162cf7d3a9f1f61b57451c67aabfd08dcadaad2223a574d","first_seen":"2025-09-26T16:10:28.34872Z","last_seen":"2026-06-20T13:53:16.975538Z","times_seen":140,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/work2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.013Z","timestamp":1781830519013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/work2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4033\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4033,"size_decoded":4298,"mime_type":"image/png","magic":"PNG image data, 88 x 79, 8-bit/color RGB, non-interlaced","md5":"42487f583c495c0bcb5e8d22b6db5596","sha1":"e697599a7ab26cb22a92301172a98c5b50d070e0","sha256":"b450a28efd1d719f1b3eaed7a03e978dd8db9d4c5713007d4e215f147e618f08","sha512":"225681aeae1bd6a945dfe73d100ce0f2251c61187fcedff87a15f75b0e72eb50247e347b8fc785f48a180e47deb9b0f66303e31d2238117beb0f666787e3b958","ssdeep":"","tlshash":"f1817d4d9c227881d868a47504f4c433bab758a19dc5e0b72e1bc83b91641f4690b8f3","first_seen":"2026-06-19T00:41:43.698445Z","last_seen":"2026-06-19T00:56:00.090385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.415Z","timestamp":1781830518415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6048,"size_decoded":1254,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"33a058e7e10ca5f44760b451199ea1bb","sha1":"56641ba0b9f9f501f190e15ac7373f909f856d04","sha256":"8d70484e3fc96b278f483f22e73b23118a388df5b82c54d5d57d008a1aa5657d","sha512":"0b42045d2d53c369c10dd42297ae52583254ef8b09bffbc011079339ed28bb5376300b9e99fdd164b05def64bdb8c4d230c264d4ad8cd290e1b7800b95ef8605","ssdeep":"96:8O1aKO1aAJc+uqO1aSN/OEamOEacJc+uqOEaoN/OXaGOXaMJc+uqOXar6N/OxMa1:yg0VRxoooi4vDOHSVeCBL","tlshash":"3ec1e191091bb950eb932cc113ce7e36ee0e23515824e9396ffe1c9cac9ec665351b4e","first_seen":"2025-09-18T20:22:52.004155Z","last_seen":"2026-06-20T19:59:56.468699Z","times_seen":659,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/ie10-viewport-bug-workaround.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.447Z","timestamp":1781830518447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /ie10-viewport-bug-workaround.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-21T08:25:52.996938Z","times_seen":134946,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/js/jquery.counterup.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.461Z","timestamp":1781830518461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /js/jquery.counterup.min.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 499\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1074,"size_decoded":735,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917), with CRLF line terminators","md5":"4f0e0b047f2ed8512d5119b31432bdcf","sha1":"15c6242be4251b23c8aec6dd4620b95c37c53d22","sha256":"3145a2ee536ea38dbcb2563fe7dad866ca2bceff859249e069cf33224f43b7cd","sha512":"3af8b27ceebcd996492f07b6d972723db8c1062296ea7d1abf0bdccc6661ffe17e8a71ab169b1032cec7edffe2f673d5bfc30df0abaa4e9a0809b0ff88c0ff56","ssdeep":"","tlshash":"1c118cb97a0a298dba90e41df2efb0989176bebc0c80985b51c558401f95ebc3f5b730","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-21T01:33:16.325803Z","times_seen":4251,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/join/manyline.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.186Z","timestamp":1781830519186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/join/manyline.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25484\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25484,"size_decoded":25750,"mime_type":"image/png","magic":"PNG image data, 510 x 503, 8-bit/color RGBA, non-interlaced","md5":"5fd0c469cdaa849fff0f817ed2a798c0","sha1":"799493e50e6985107bb19402679f8e7ef0a3b4f0","sha256":"c6942f4ceadf66ebca42bb3e7b32f12532340e4ca3cb6755b7e5297db51f407d","sha512":"78417928b44915cf49307735a6b57290f1200210aa855053b312002688e9ff647c9354d4494786166f4b409ef5f215f4efcd7a3f90714e18d078466e68b9fe95","ssdeep":"768:AHldQPG4Xm+hutrtbiNHGBwYguj8TM78gJT8D:ASXm+hutR5MuHp8D","tlshash":"94b2d1a96bcf1c109f4702dae0172b1e7704740287a5dfde99f29b21e5250a590fb28b","first_seen":"2024-08-19T17:11:42.488828Z","last_seen":"2026-06-19T00:56:00.095198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBCABg/d=0/rs=AN8SPfoFA2LaiO2N6FUalgBtEOEzo2fo9A/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.621Z","timestamp":1781830519621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBCABg/d=0/rs=AN8SPfoFA2LaiO2N6FUalgBtEOEzo2fo9A/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 04:26:30 GMT\r\nexpires: Fri, 18 Jun 2027 04:26:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 73729\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4818,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-06-21T07:41:47.124373Z","times_seen":11954,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/wind.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.318Z","timestamp":1781830518318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /wind.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1001\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4626,"size_decoded":1310,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f228963c08e9a3cd3a49a306e1332463","sha1":"685d120a7d853de99f650399f9a96bcce29fd838","sha256":"ac64a5155ca39bb0b47e7525ea55aa4952a9a0aa55169bba3ba6f8f604690c78","sha512":"ef89e2426ba980742adbb1dee58ace9787b37a10921921c5b9f6b4d84457a7d55c2d443b4ef2d21b6bc1394ddb33d8ae700f23d5bac18d3f7d93b9273cb99dc8","ssdeep":"48:veHzbHzD8pDkXWC/+w6Ps5fbrU+G3BmkBVW5xjezSyN0bfeTyqspBKrWmF9:2vMwG5WjYpU8XNIG3ieB9","tlshash":"e29114aa940019491337873bd7e80e94ea350063b51316d836eb7449afbef387397da2","first_seen":"2025-10-27T04:07:10.644477Z","last_seen":"2026-06-19T00:56:00.096841Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/faqstyle.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.320Z","timestamp":1781830518320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /faqstyle.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 367\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1466,"size_decoded":675,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93733ea547d92c62e78b8161c835a08a","sha1":"25a7ac9e6a65b09ead1a0463364cf4f713e5db49","sha256":"ee98fb2cb535fd27394c37afd932a7c35924cefa4e92c244d8b650158a83c3c1","sha512":"ea9e231350c81fcbca209c335f5a890f632d6f1228c1e75cd3b75b5a3e240f2e9ecfbdb1da9af050c9b6788dd5f7c40b452ce89ddd1a2c3dc7a724c95e709dd4","ssdeep":"","tlshash":"f131696cda102005b23bb6956fb11b9af23a6453bf17082db7f466466f7213c4092ed9","first_seen":"2026-06-19T00:41:43.597265Z","last_seen":"2026-06-19T00:56:00.097925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.2/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.355Z","timestamp":1781830518355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.2/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 01:45:51 GMT\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUNAHTSHhK9YM2NC4sq23MW14UG4SKKLC2EAHTDIIMFv%2FV9HYXMqXuV2FWPoxqBXjfNAjQfOy2gxT6aav3E8NuXFlkMqcmDyl%2BWHCxG0187biIMRhkkTRSXIZjpFJG6PTckszcWm\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 117691\r\ncf-cache-status: HIT\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\ncontent-encoding: zstd\r\ncf-ray: a0de9143eafcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":13273,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-06-21T06:46:14.171949Z","times_seen":14621,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":13,"connect":10,"send":0,"wait":7,"receive":-1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Oswald:wght@200;300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.401Z","timestamp":1781830518401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Oswald:wght@200;300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10926,"size_decoded":1367,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"28f5cf8e5b533ff107fa279d678f7b0c","sha1":"c671aa6a7192689af61f93c61007da6eb3d3de43","sha256":"9478dce29a03eae936991e6154052df43f834b399fb0a46737fda0a7562e0992","sha512":"a41a16a84029906fccef78b3460abde40ecb29e29a2c120f19cd866f01ea50d6559a9580ce86f59ec8d0b1f3c23e658faf181d91891d55aad0ec116cddec8e3b","ssdeep":"192:lKVL29hvUK2LV+hoJKvLoXhVaKoLvwh23KBLSphzQKSLB6hst:Qtm0kTiKU5ug5","tlshash":"3332ada2042ba480ef475cc133cf7e36ad8ea2463461c5795ffd18a8dceae211359b4d","first_seen":"2025-09-12T09:49:51.457501Z","last_seen":"2026-06-21T06:45:56.524011Z","times_seen":2591,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rajdhani:300,400,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.419Z","timestamp":1781830518419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Rajdhani:300,400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6048,"size_decoded":1254,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"33a058e7e10ca5f44760b451199ea1bb","sha1":"56641ba0b9f9f501f190e15ac7373f909f856d04","sha256":"8d70484e3fc96b278f483f22e73b23118a388df5b82c54d5d57d008a1aa5657d","sha512":"0b42045d2d53c369c10dd42297ae52583254ef8b09bffbc011079339ed28bb5376300b9e99fdd164b05def64bdb8c4d230c264d4ad8cd290e1b7800b95ef8605","ssdeep":"96:8O1aKO1aAJc+uqO1aSN/OEamOEacJc+uqOEaoN/OXaGOXaMJc+uqOXar6N/OxMa1:yg0VRxoooi4vDOHSVeCBL","tlshash":"3ec1e191091bb950eb932cc113ce7e36ee0e23515824e9396ffe1c9cac9ec665351b4e","first_seen":"2025-09-18T20:22:52.004155Z","last_seen":"2026-06-20T19:59:56.468699Z","times_seen":659,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/setting.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.506Z","timestamp":1781830518506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/setting.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 641\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2204,"size_decoded":877,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b5b2f99ae4bfb9618b4f8044881f0ad8","sha1":"3bc25c6829888e90f74d1f42cc023b323b97ae3d","sha256":"d457afdd933355328bff8e19cc6eb1de6fa448fb719462ab7397abddc189377c","sha512":"36e952503d87a2d79cac37f280e0e076f7b1548d8cc9486b1c75926ede550150c34096417fa42ae0057f44a2541c9af0fa5081184a0db9809bfdbf7fa6a23012","ssdeep":"","tlshash":"b9416b40b79d031593b07234b5f92684e83de63236a061a0f1f80dde4be0a119b59fdf","first_seen":"2026-06-19T00:41:43.610363Z","last_seen":"2026-06-19T00:56:00.102708Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:100,200,300,400,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.432Z","timestamp":1781830518432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Raleway:100,200,300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16533,"size_decoded":1440,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"53832b222f0adc7a095d4abb822985e0","sha1":"50854a5f80bb21a1c0a307080d162bf0896aff4b","sha256":"c0023fbe7691f8fa1c1dbc5b2b896b9b012f589d35fca53ea4cc3e3818b0316b","sha512":"e0df6064dc0082ed149f27cec2fa7c78a82f32316eec8a9190a966402d274841abeb3e23f731035ac4034145b52d06d5e805cd6f8678f8f81996efc515f5050c","ssdeep":"384:tUdxqFndzc7iFSnStobcFwf+JmT2RkvgF:tYA5df","tlshash":"e27299a00917d000eb47adc663ce7f36ee5e62053046857e9bfd58f8acaad361394b0d","first_seen":"2025-09-13T16:12:54.834038Z","last_seen":"2026-06-20T18:28:31.495947Z","times_seen":535,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay7.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.276Z","timestamp":1781830519276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay7.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3207\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3207,"size_decoded":3472,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"782836adce8bd4eb373b81cfe0c7783f","sha1":"737e034602e93a1d422aebce8b278f80279c0cd8","sha256":"aa409a43bc63f3f0f71ed37b87bceb8013f6171ea8b0b79093c1a2b8021b4a3a","sha512":"73605fce7f29ec9004f5ebe74fc592f5569e74ceba03943692dd1af64de0ce122a541f6ff963649c6c9a6de8da9a4c5ec412532e7f512a99abc69b4909dcc7c3","ssdeep":"","tlshash":"ec618e93d947650031388797f4d45a375bb18748cae8a3af5c5fc52d88344fb10953d2","first_seen":"2026-06-19T00:41:43.569302Z","last_seen":"2026-06-19T00:56:00.103905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.969Z","timestamp":1781830520969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:15 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nage: 53105\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":848,"size_decoded":1506,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-06-21T08:17:21.826319Z","times_seen":6926,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Comfortaa:300,400,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.426Z","timestamp":1781830518426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Comfortaa:300,400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10925,"size_decoded":1422,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3482b2d68f96167b45dc0fae52428c8a","sha1":"93c2d987e7109a2586b6f0451037afee16ef94a1","sha256":"d31900ee1d8405d90a99e9b3a4894244e0befc8d7d57edbde559665828a0d321","sha512":"deb27091dcba7b4121509a811df7fcd100a53c48644ca4277507e5f07a1cf4afc2a0948e8f9757002e04e7117accd2cdea6279fad5cc54d94e1129bda86df6a8","ssdeep":"192:08OE8O8j3l8U8k68j8O58n8j348J8kb8c8OK8A8j3/8a8k08F8On858j3i838k9J:ZOJLTK5awOW8TFGVhOfNT0PEqO8WT3sG","tlshash":"13326bd09017a404ea830cc237debf3a9e8e2615608185ba9ffd1ca86defd27535471e","first_seen":"2025-09-12T07:22:10.787074Z","last_seen":"2026-06-20T16:36:19.419202Z","times_seen":440,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.469Z","timestamp":1781830518469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:28 GMT","end":"Mon, 17 Aug 2026 08:36:27 GMT"},"fingerprint":{"sha1":"E7:51:4F:91:9A:48:E8:45:5A:7A:64:2F:97:26:D4:33:CE:C7:01:89","sha256":"5A:8E:04:C3:1E:AD:E5:2E:66:07:07:1F:3E:5B:BD:CD:B6:1C:36:19:BB:EF:38:E6:77:B1:98:44:4E:A5:D7:CB"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":76937,"size_decoded":27562,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2091)","md5":"4a92ffed4c0babe9268fbb9144cfdbc8","sha1":"72e47d136f7c5074fb1cc82aec79015a37472c85","sha256":"327cb9c321978fd50cdaff0ebe9acbe9d28abeadbdd14f171aa80bce2d790b22","sha512":"ce57f108f66d82ea18e6ba4f9595e0da2b9502c1caf94ed9390746f06c69bbff8a557bea47b325b6e330135affba7ffd4cfb2e89468b28ae4abe228fa38eac29","ssdeep":"1536:XI5LCi2WaeUMPk9ZiU593lGK17KYPdWi1GLi/SiLwNWBv:XETk9FlGK1lPd7NSiFv","tlshash":"ef73b7ccb6a674659353b4b5412f000eb23f68adf8484cacb288d8e1adf5949453bf7d","first_seen":"2026-06-19T00:08:33.202919Z","last_seen":"2026-06-19T00:58:45.93934Z","times_seen":32,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":43,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/line3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.830Z","timestamp":1781830518830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/line3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2129\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2129,"size_decoded":2394,"mime_type":"image/png","magic":"PNG image data, 113 x 112, 8-bit/color RGBA, non-interlaced","md5":"dc32a20eaf0830abb5ef9391f50814d3","sha1":"f934e642bec9fa9c74a61e0e1e17791c68136c0f","sha256":"2b25cb08a73afdccec528d269d36d323f3b71336af33afaf0aa8961c65d324aa","sha512":"d1839f969429348521a07eccb56e69f001549cd9f17014598b4db4100f37721557bddb09a4669d9fbb45949c3fbe58490a5e5a0bc042eded179805d5757562eb","ssdeep":"","tlshash":"c94119b1e159ec3633033c796c4e15f6a2beac601494216784a337b9414cde39698ecc","first_seen":"2024-08-19T17:11:42.475289Z","last_seen":"2026-06-19T00:56:00.117589Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/footer-element-one.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.195Z","timestamp":1781830519195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/footer-element-one.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66273\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66273,"size_decoded":66539,"mime_type":"image/png","magic":"PNG image data, 371 x 412, 8-bit/color RGBA, non-interlaced","md5":"8dd3feafdebb8f84d21d37d7744e095a","sha1":"aa447e5248725ca84694dae69d805fc641028c04","sha256":"c02dfc957b8db81c57d17aa72c3e2e841705eb9f94b247a003bf28b44d89aba7","sha512":"98a1b86cdc7c9e56fde2ec2b757067423a307814c80899cc7f592cecb4c5c1584c2a194a442262f18b43aee8e0724ebcc8f2f475ff8f9bf9aa5e1069fda8f8d4","ssdeep":"1536:cjBRVYv/4KAJBBhs7kNUvaFHLvjFPodIDBaK9Unl7U:qRVjXHhs0XLL9odtwUnl7U","tlshash":"0053027f60b76edef6a2b7504201b0f992a1dcc2c90f3ad8635051c1c5b3b47a6736a8","first_seen":"2026-06-19T00:41:43.692703Z","last_seen":"2026-06-19T00:56:00.120363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/favicon.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.293Z","timestamp":1781830520293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6634\r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6634,"size_decoded":6899,"mime_type":"image/png","magic":"PNG image data, 65 x 60, 8-bit/color RGBA, non-interlaced","md5":"9944842166bfbb55f4cc03a2a3717c90","sha1":"f130ed9aa2587575269379016844bee0aa10a10b","sha256":"4f35e5949d99927e7b6deb61fe782fb61fa0d2fe82aaada70c84d8953907eaa7","sha512":"ac60676d32894f04760f0b86f9bae62c003bd7efd1a5aed438e4e4234ef100013e2b065841d3121b1b448d0371f3c19e3928b33847d973bc27329394f6e0c63a","ssdeep":"96:pCyWwbLUM0+3yGlrsf1SRz3qWVGQTiBoeiw+hisGnlVU5g72KeNhpDNluVHuGyxP:7kE3EN0GEGQTiXixrG7U5Q2b30oGPWXN","tlshash":"89d18d015fb68f7aae3872461c83a3d0a6f6814dbc786818c7829390397dc682a057bc","first_seen":"2026-06-19T00:41:43.699617Z","last_seen":"2026-06-19T00:56:00.121328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/join/icon-5.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.052Z","timestamp":1781830519052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/join/icon-5.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4252\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4252,"size_decoded":4517,"mime_type":"image/png","magic":"PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced","md5":"1ef57d67f165ac76228e5a806e194811","sha1":"7730c2b9fea3ed8a9343db73b8aeef5f188bd750","sha256":"562d3a96891633e51b8d9183e0d58ce74039b9898226b530f06a80573ea7cbb6","sha512":"36202889ca520d9894cf9e4b03b1b7236b5c173d05ff267c5067173ef99829cf99612ecf001304b0234e8c53345ba623316049cd8d0808cc95a0a80bad491d0a","ssdeep":"96:TNMZo0PNPQaitfBmsqTWEWDF64xygXOgYRVg/nhg4TIGrOq:TsPNoaitfB+TWpFT/eeny4Wq","tlshash":"6b916b2992e96fe4c58062ac158261dd4f25385c03f38f0e68fac69da0685d4357a347","first_seen":"2024-08-19T17:11:42.490359Z","last_seen":"2026-06-19T00:56:00.124637Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/workbg1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.683Z","timestamp":1781830519683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/workbg1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2611\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2611,"size_decoded":2876,"mime_type":"image/png","magic":"PNG image data, 130 x 145, 8-bit/color RGBA, non-interlaced","md5":"37ae748022cbf99734677d3200be7b17","sha1":"ce0807190c242c242e73aabfe2b2d94d86e3f7a8","sha256":"d5937cda02f63d563d248a08df6e28fe8200348610c2704821983f61bde0c219","sha512":"e7e1bff50dbb9f74ede010b63e96907b43e04efc6f73544267cb98d893a10cf20bc9a9a898444665772c03e76a0319b2a717e1fa2536fbdc8d5028607289a7cc","ssdeep":"","tlshash":"08510a8ca8505701e541a57535f0c7368e9100d09694e4b6e6dfc46adc383f8a4feddf","first_seen":"2026-06-19T00:41:43.695578Z","last_seen":"2026-06-19T00:56:00.125275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.478Z","timestamp":1781830520478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:08 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 53113\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6225,"size_decoded":4177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-21T07:39:17.12967Z","times_seen":70869,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Titillium+Web:200,300,400,600,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.387Z","timestamp":1781830518387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Titillium+Web:200,300,400,600,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5296,"size_decoded":1190,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"043094626cc98c0ccd9c351d32cc44ad","sha1":"552cd166c1c9318e03162139d7716118fc35576a","sha256":"2deadeeafe4d81f23dd2d48d83c67e1d5b9642edf42583298a3ea35115ce26b7","sha512":"cafb27133ae028aee05c938efc3799a251564b19f9f1e66cdca5592bfbdc30b222af827aab04a6576dbb54d9c3223fac33a3433555381f0f74d3ecf5bce2c46d","ssdeep":"96:oO6aAJc+ucO6a4NHO1aXJc+ucO1aZNHOEaZJc+ucOEaNNHOxMasJc+ucOxMakNHq:N0mqDFEZYSYCKKAxK0Urz","tlshash":"0ab1fd810ca7a100db874dc653ce3e37ef0e31516458a938affe08e8acdac6a935571d","first_seen":"2025-09-15T15:07:05.561772Z","last_seen":"2026-06-19T00:56:00.127145Z","times_seen":102,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.443Z","timestamp":1781830518443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Jun 2026 23:00:13 GMT\r\nexpires: Wed, 16 Jun 2027 23:00:13 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 179705\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86927,"size_decoded":31383,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-21T08:03:16.22436Z","times_seen":136214,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":16,"receive":15,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/line6.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.862Z","timestamp":1781830518862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/line6.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2439\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2439,"size_decoded":2704,"mime_type":"image/png","magic":"PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced","md5":"de586b9806ac95a5dd6a4e8d4cd65b3f","sha1":"e320be44241f8dec80b9d252ab339743449edd0c","sha256":"cbcbed9dcd3ba5466259ff05456e9eb1839c0915162a1aab39ce3c9bb64ce1a4","sha512":"7c94645ddaa592cb8419c2dcdba4b29b2dddbaf007d4d93245cacb0c7ba3ca2a13ab11b588833b4171ad153b1c8c778f4a8e397f2dac398ac03636b0ecbbbfa9","ssdeep":"","tlshash":"5b413a641190063aee52ed68052165b38bff880f272bd79c54889ea2dfb9be51995200","first_seen":"2024-08-19T17:11:42.511013Z","last_seen":"2026-06-19T00:56:00.128422Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.485Z","timestamp":1781830520485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBCABg/d=0/rs=AN8SPfoFA2LaiO2N6FUalgBtEOEzo2fo9A/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 10:10:10 GMT\r\nexpires: Fri, 18 Jun 2027 10:10:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 53111\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1842,"size_decoded":2515,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-21T07:41:47.122564Z","times_seen":66277,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.902Z","timestamp":1781830518902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2437\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2437,"size_decoded":2702,"mime_type":"image/png","magic":"PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced","md5":"507309e91728d4dced234c017b5e9a0e","sha1":"0a7e83d32add1394666418df8785be52d20a0f2b","sha256":"e37d43f953dfb117cb9deeac926841803fc73e7b88cba454a2c6b9af920ece15","sha512":"5cf09187bf0d9ba6926750d3d444624524eab5ef1e212460293c661570d575d8c89e4e01f3666bc0d4f206897714fef7f76a9cf188270af3a1f4afdd6a311276","ssdeep":"","tlshash":"3b412b82fd17adece2175ab1d4e68ad6853cb71bde794d040dbdd1774009017e54d603","first_seen":"2024-08-19T17:11:42.487515Z","last_seen":"2026-06-19T00:56:00.129612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/calculator.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.057Z","timestamp":1781830519057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/calculator.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10072\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10072,"size_decoded":10338,"mime_type":"image/png","magic":"PNG image data, 80 x 81, 8-bit/color RGBA, non-interlaced","md5":"aecb19c1f380d91ad25fdd3be22591c8","sha1":"94072e729d458f63593ccc2154479303b319d6b5","sha256":"21054489ce87a142c04deadaefa083ce5a8e06865d865bbc54611dc275902fe1","sha512":"60c78d87c15bd3921bb9b38a59524b9487fa1e1217f8c964e36b503eeb12e23a96ea074ad3aa028106b846d946450d2bb4f8b9681390ae4c275e6d902826b4ac","ssdeep":"192:aW98tAGj1epDfM5RBQSdcZatF8+7v+iUrBXOZfX:3CAGj1WfaRBbOSa+aVe/","tlshash":"6622bf76bd154504870db83916d4a91fd16581d8e5c5f0f4a647cf309ee237f00b6acb","first_seen":"2026-06-19T00:41:43.754624Z","last_seen":"2026-06-19T00:56:00.13021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,200,300,400,500,600,700,800,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.368Z","timestamp":1781830518368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Montserrat:100,200,300,400,500,600,700,800,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16353,"size_decoded":1459,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"390de278fa133035ab2d992efccef89a","sha1":"b3face15e551a2c336b0c4a5d978768bc3613adc","sha256":"a2a43885bc0187ea1b0685eda8cddfa48dfa6395494f8c91876521bb51e0a11b","sha512":"f0927de100222c6d10bf20d6ba6debc2fe34402d8b552d90d0acdf9f6e8e9fef6b0ef867398bdca5e861055446639954bc47f41c28685daf0543108e1e522d47","ssdeep":"192:N7Rd77o7Q7OP7ufRc7j7Oqu0RH7YQONu1Ra7h5OsuyR97uGOXu7R47nfOeuQRD7V:NVdPoMiIkvb/SjpbAfnPebFm","tlshash":"d472ae51141ae500a7432cc923cf7e25cd4e61667494c576bffe2ca8ade6c365321b3d","first_seen":"2025-09-06T01:22:06.992136Z","last_seen":"2026-06-21T02:52:28.623405Z","times_seen":949,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Expletus+Sans:400,400i,500,500i,600,600i,700,700i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.392Z","timestamp":1781830518392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Expletus+Sans:400,400i,500,500i,600,600i,700,700i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7028,"size_decoded":1207,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70c581d42ea22297cb156ff3cd13a790","sha1":"40e5f57090599de888a6c6ba064eaeda6d64564c","sha256":"62f2a3a5d78dec9f26c4be9f1f3401d9410021341ede465ed47788537db37973","sha512":"2fac778d9cf4237927136cea4ecae4ecddb6277982c4e60179e8927f73f86a2263f4f1fafd28b41e5c5be1de8d54607283377b8351e4794072f627c097fc4acb","ssdeep":"192:xO4sOkN4sNkE4sEkr4sr82092b02+b29W:x2dPC4DpM","tlshash":"e5e1c083082fa514db831ec222cffd32ef1e62946880886c5bfd14c8bc9ac5a5361b0c","first_seen":"2025-09-24T01:51:17.526697Z","last_seen":"2026-06-19T00:56:00.131928Z","times_seen":15,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.727Z","timestamp":1781830519727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 18:25:30 GMT\r\nexpires: Tue, 15 Jun 2027 18:25:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282589\r\nlast-modified: Mon, 15 Sep 2025 17:03:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15264,"size_decoded":16077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15264, version 1.0","md5":"21c1966f1535b75b772cd782f4bdce05","sha1":"df8c2865d1240e3eb3183d3f8fc97a047ec1a92c","sha256":"13626adc698ca3982595b130053d69e117d004c66a1449227597a86b6ac6e446","sha512":"9c94410c1c76b8fed70f9645a696f34a1298c14a62de11b34331b82a7b519096f4cf20229439c6aed35b697e7d0f4ee6fb9e78ba2bb7cea8761c1a3bdc0168a6","ssdeep":"384:uUXHu3IYTpYgOMJLD2/me3KLlixWBUL101DUgmBfbg:3MphOs2ue3KpKJeDGBfbg","tlshash":"9a62c1258e352dc6d74ec72b81b91c61c34455b3ca2ede2eda54b7085b3f0432a3681e","first_seen":"2025-04-24T04:57:47.892353Z","last_seen":"2026-06-21T05:36:26.723812Z","times_seen":1954,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/line9.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.227Z","timestamp":1781830519227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/line9.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1854\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1854,"size_decoded":2119,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"8b204d77d6afc4591809a2ac95455b01","sha1":"766391b1f1de905925a4df52a0cb386fa0f103e8","sha256":"6649b50ae9d5f0bd84345053c718c8a7474d023b4caa8111587ea30a2c00bc3f","sha512":"45b682749ff0d4e8da2770359e86fb8a3b4ab8c6b48def4b0ebb6ab502192c5e3889e527a39cae65607ba77c2b4fc2c6119f81845033a905feaaef3ff1cca911","ssdeep":"","tlshash":"793119c788c4e5bfb6612b39cf9900f0416fa92101f0a004622ad7ac3ddc51b56cfe58","first_seen":"2024-08-19T17:11:42.502606Z","last_seen":"2026-06-19T00:56:00.133052Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3_-gs51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.740Z","timestamp":1781830519740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22008\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 14:33:30 GMT\r\nexpires: Fri, 18 Jun 2027 14:33:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 37309\r\nlast-modified: Wed, 10 Sep 2025 16:22:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22008,"size_decoded":22820,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22008, version 1.0","md5":"8e986e86d57eb493631f911cb433dff4","sha1":"ad8e9490a983a615bfe43dcd4ad332e611178948","sha256":"cd759df8ef9efc98fee14307b4eb5ba27f08b1f8f2f3ad2872432e25c89907a8","sha512":"55a554f7435bccb7f6fb0b6f9dd76b2981ef737f3cfc50fa9ea494e9ae2f6029a0bc45cf8e9b0e18e2a4423226c8410557979957742417ecdebd241850e1dfa3","ssdeep":"384:HnbuSqWLlaBJfhZSLrvfIk+tB8PHGCGWVigZo7whJ8jyBzae6lRLbxwugfYaH0ph:7KWLlaTZS3b+tBCiWVrZiwhu4glRpVgc","tlshash":"6ba2e1c9c4f59d27f6ce1671ee042bd1600b21dd6b12c1879a1dc25bfd536ab2e8cd08","first_seen":"2025-09-11T19:45:57.911584Z","last_seen":"2026-06-21T07:40:34.690574Z","times_seen":5431,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/teko/v23/LYjNdG7kmE0gfa19pQlEpVsHVefe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.887Z","timestamp":1781830519887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/teko/v23/LYjNdG7kmE0gfa19pQlEpVsHVefe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 17:44:08 GMT\r\nexpires: Fri, 18 Jun 2027 17:44:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:22 GMT\r\ncontent-type: font/woff2\r\nage: 25871\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7444,"size_decoded":8255,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7444, version 1.0","md5":"167ea2cf6a5e8fbed18ea750912d910d","sha1":"3ce399c17478ff2a1ab092b23d739d0f878bbe60","sha256":"7c869b8d464e64dafaadc3c77f691ccff2cffbc5254c1d0498961931a34b0ce9","sha512":"c9dedf3b6dac13252cb976ac259a58b207a1951bb677e813ab3f060d1c8cc40f29063482a52ae7bf871e5db971371fff268ca7fb13fc31b185ab401c743bc9af","ssdeep":"192:c1gBhDsRuCKoIS6bguA58TjskdJeza76GQSDaHWNMQo4HK7:cmcibguA5esmJ0c+SmHEtq7","tlshash":"8ee1aea4b1a75884cdc29fbde4c39fd94a8d790d39a20ac836023c42f99bc5c947699c","first_seen":"2025-05-09T13:01:13.692939Z","last_seen":"2026-06-19T00:56:00.13435Z","times_seen":83,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.354Z","timestamp":1781830518354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 16405\r\nexpires: Wed, 09 Jun 2027 00:55:18 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fq8KcT1yoMdVMsqB9Izl1lfZz83AYBSQix2maj%2FmckoPOO9BPrO47L2GzW1y5P89AcR7xB9ggnoni%2BFQWztb69j1URASGsZPOv8C%2FHzPz9j3S0%2BF1tnjfx02sZkbGU0pI%2BPhvbBW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0de9143bf4456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":6608,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-21T08:32:52.468893Z","times_seen":288569,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/line7.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.862Z","timestamp":1781830518862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/line7.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5102\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5102,"size_decoded":5367,"mime_type":"image/png","magic":"PNG image data, 173 x 173, 8-bit/color RGBA, non-interlaced","md5":"fe129341203171f2f4f374e393888686","sha1":"1beee0cc28ada7b8e116492d5fc1e971bdd24c4f","sha256":"f43cd1c40850fe32913654f99008c4d9ab31b73754f1e31f6fe1607e229352ca","sha512":"94fb4f649830729b988bec3acfdd13eea22c12d6ca73edaf24c03e7e632e326c0658547cb869804536e151053ee9cdc3a065480c41344ae91a591765300d9d3f","ssdeep":"96:a6Bxeh2Cm6ogQPcAYDft4mxx3j2fNOW/t5x52+ls6+ExlHtRCoOdaLuW+:aT2CDXQPcpxKOW/tx2+DBxJtRComeuj","tlshash":"bdb180956d18646fcd909a71d1ff230e11ba2794cac4668b31ede4dc27531d2bf05c13","first_seen":"2024-08-19T17:11:42.483957Z","last_seen":"2026-06-19T00:56:00.135614Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/ie10-viewport-bug-workaround.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.480Z","timestamp":1781830519480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /ie10-viewport-bug-workaround.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-21T08:25:52.996938Z","times_seen":134946,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.611Z","timestamp":1781830519611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 18:25:30 GMT\r\nexpires: Tue, 15 Jun 2027 18:25:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282589\r\nlast-modified: Mon, 15 Sep 2025 17:03:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15264,"size_decoded":16077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15264, version 1.0","md5":"21c1966f1535b75b772cd782f4bdce05","sha1":"df8c2865d1240e3eb3183d3f8fc97a047ec1a92c","sha256":"13626adc698ca3982595b130053d69e117d004c66a1449227597a86b6ac6e446","sha512":"9c94410c1c76b8fed70f9645a696f34a1298c14a62de11b34331b82a7b519096f4cf20229439c6aed35b697e7d0f4ee6fb9e78ba2bb7cea8761c1a3bdc0168a6","ssdeep":"384:uUXHu3IYTpYgOMJLD2/me3KLlixWBUL101DUgmBfbg:3MphOs2ue3KpKJeDGBfbg","tlshash":"9a62c1258e352dc6d74ec72b81b91c61c34455b3ca2ede2eda54b7085b3f0432a3681e","first_seen":"2025-04-24T04:57:47.892353Z","last_seen":"2026-06-21T05:36:26.723812Z","times_seen":1954,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":33,"dns":1,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.731Z","timestamp":1781830519731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 05:53:35 GMT\r\nexpires: Fri, 18 Jun 2027 05:53:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 68504\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28488,"size_decoded":29300,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-06-21T07:45:15.809436Z","times_seen":31002,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/zwicon/zwicon.min.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.341Z","timestamp":1781830518341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /zwicon/zwicon.min.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4084\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24200,"size_decoded":4393,"mime_type":"text/css","magic":"ASCII text, with very long lines (24200), with no line terminators","md5":"a062432f501f61460742c2abee5d45a6","sha1":"43fcc9cfc05cb6f171dc44da94cd7733a13a82ee","sha256":"7c55b0fb1bec7cd39f49513af42298979157a6a51b62d37ec378b6b0a925d870","sha512":"a46e380d0b9eb458501079d6656d987e27291b00c3abcd546e9a2e2070ad239c41973cdc04739d259dd6931eba657ca52555aa72e5a26fbe2401f4d4a8a40f12","ssdeep":"384:pozIGYCOyQwArBmTS/SzDDL7sJ6V5SO0QwWL9:pI2VQB","tlshash":"c2b28ae6f4ea51d43731c447cb65ea08b09af122decb6d13f0abc50c59f226606c5bb9","first_seen":"2023-05-25T07:58:56Z","last_seen":"2026-06-19T00:56:00.139593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Titillium+Web:200,200i,300,300i,400,400i,600,600i,700,700i,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.352Z","timestamp":1781830518352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Titillium+Web:200,200i,300,300i,400,400i,600,600i,700,700i,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9249,"size_decoded":1288,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e264fd24eea29fc73e0aa55cbd9bf4c7","sha1":"67f353c88a69626af9c3d7591e72c9b6c2d3af08","sha256":"758ebac994f67976bd8c079c1394207ea179a576ace8c589d6e123f09f1240ac","sha512":"bcf95fa715c898f3cb6f2b0d68ea3625a656098d46f903e374aa983c9e15c1a4cf4f7aba1cefa081404dcdf8dd2a43a4aa7b43b4f8f0e5341e330451143dc5de","ssdeep":"192:piPAiql8AlNkQAkw2VA28pNApI0sgDX2Zq4YIAKATKGUpz:pzj//U/tBAErJ","tlshash":"8712eb820c6ba144eb9309c653de3d37df0e725460986834affe18e8bc96d6a936531d","first_seen":"2025-09-20T18:03:32.80518Z","last_seen":"2026-06-20T05:27:56.099918Z","times_seen":338,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:100,200,300,400,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.378Z","timestamp":1781830518378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Poppins:100,200,300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":1349,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-06-21T08:07:33.217511Z","times_seen":7394,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.901Z","timestamp":1781830518901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5327\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5327,"size_decoded":5592,"mime_type":"image/png","magic":"PNG image data, 173 x 173, 8-bit/color RGBA, non-interlaced","md5":"05d41a68e2719b062d3e87e2ca1a6f9a","sha1":"f1f22b61ba7347bebf970c8a65481995a5722ebc","sha256":"edab7f2b4e47e9110ee3413a7c137b1e82ce0b562b86d189cdc4b50f368e0ba4","sha512":"cfc56700f7d520f8bb50d30aa456c958fa9977c62759704d6daeff13f303446cbefdf5379d20b8a034347f20b3c4a1492e163941766c284394d3244d4198d0d2","ssdeep":"96:HxZEHC+KvtJMx6sJ2hlr/cOoUm3ItkDW95MVX9OjkqsHYLirekHwBO:H7epKlq5J2hloPUUSauAcjknHn+O","tlshash":"a2b17ec89a69c69e97ed8239729026a6fccfdc84384e8ce462145df78d60f21f74d314","first_seen":"2024-08-19T17:11:42.482928Z","last_seen":"2026-06-19T00:56:00.142491Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.450Z","timestamp":1781830518450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30306\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 05:52:53 GMT\r\nexpires: Fri, 18 Jun 2027 05:52:53 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 68545\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86659,"size_decoded":31289,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-21T07:40:11.390244Z","times_seen":94748,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":24,"receive":8,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/js/jquery.simplyscroll.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.460Z","timestamp":1781830518460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /js/jquery.simplyscroll.min.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2172\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7898,"size_decoded":2409,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (543), with CRLF line terminators","md5":"e3944dd1d9f6ba7648f83238cd1fe3de","sha1":"9b4e48105ac5f537212b49c8ae6c2d96d9cf508d","sha256":"b8108d8ff16dd6d24d55c76a0c8ba14edf90df8267beea063447b4c17836ebbb","sha512":"35c49bfce438c99abcc122686f56cbd75a0b7f028c34c538951c6739b18af09e3d90e416e1dd21162d4ebbd4116112184be8b1e3957daaeb6020d727f7d5758f","ssdeep":"96:Yv9Kwgw1hjfgFjxXBt1ZT58eOfmNLoS+Yfjak+M28z9JsRiJa12ZgWQMHiQgVo3z:qT2VBtJloPYbwM209K4dWjVsUun+J2p","tlshash":"03f1430fb24424645bddf1e68152060ab53b905bf44b661fb8fcace83a69e1e213777c","first_seen":"2023-03-07T12:03:41Z","last_seen":"2026-06-19T00:56:00.14401Z","times_seen":136,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/line1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.864Z","timestamp":1781830518864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/line1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1275\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1275,"size_decoded":1540,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"faa8957e09730cdc071d492de732d3fd","sha1":"20478a1c4740e748f18b6b8a38cc9c29c43dd2b0","sha256":"29e1b183a3b3b4920f141036d2a1669367008dd80afbb5f79c47fc0b21820ee8","sha512":"2293b02cd82e9e4946929ab3fb8c1490fe075de351c48031ba777b9e87d308d37d93b57ed5d8e5360cac10dbff533ee8e266e55890f3ef569349d6fada87e5ac","ssdeep":"","tlshash":"3b2198e65ed1cdde48e95bee55e86c6cc3a176b4f5278830d004c88132ab24409b4362","first_seen":"2024-08-19T17:11:42.488193Z","last_seen":"2026-06-19T00:56:00.145529Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/work3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.015Z","timestamp":1781830519015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/work3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5518\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5518,"size_decoded":5783,"mime_type":"image/png","magic":"PNG image data, 88 x 79, 8-bit/color RGB, non-interlaced","md5":"1676fd8e9b623fa5781887e92898280f","sha1":"7cfe8b74327503f96e83259bcd4c2309a76cff8b","sha256":"855962452cb3e0547868ca31e062216a1c723a93ff68388a1917d03094472927","sha512":"fa3441188d27720e201dd12f37a746075eef7202ca93138ca1ccb4230ea33145dfbf1021a141bc6df86b1e35c7b6cc2af805a257dc28a2bac26aef0749977365","ssdeep":"96:TQtbw2LImtUoisjixRAMAZnf99PptDA+yFYPeSMzH6Ps8VhdSkwNTlnVGr6g/N6y:T8iMWARDPpnKcSyDVhdSkMGr6A","tlshash":"e7b18e75fd8b9c095159ac952cd47857d40bcde4ee406b4753678812cdf83e6210a9cf","first_seen":"2026-06-19T00:41:43.616404Z","last_seen":"2026-06-19T00:56:00.146593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/join/icon-7.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.055Z","timestamp":1781830519055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/join/icon-7.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5242\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5242,"size_decoded":5507,"mime_type":"image/png","magic":"PNG image data, 173 x 173, 8-bit/color RGBA, non-interlaced","md5":"26761bb297f677e1d17dd9792b5e5279","sha1":"c60004ce9e30868d9c87d3de55a0aaa1e87f3ea3","sha256":"aa0382e1e25da919ef2eaa7b0a150faf58fa003dc2db221d7dcfe87204900e4f","sha512":"22aaa36af79d425e767ed8f58218791b6b43cd78ad35fc4f4d6d9620d9d9fac21b39e35794a5df900d710a8937b676e20ab8dc0e36bde7ee495ae05b78d72bc4","ssdeep":"96:Ux0wXncsJKgaV8V+S6NIXdzo/Znch45SShMlhs6LGyUd74ScVHr:uMUK78V+MohchqSc0hs60kSoHr","tlshash":"b7b17cc001a0ab58c0c48505447b35e6d2a4fc8c8016df69dcc77bddd2a5797ae63327","first_seen":"2024-08-19T17:11:42.492338Z","last_seen":"2026-06-19T00:56:00.147463Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay8.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.277Z","timestamp":1781830519277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay8.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2343\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2343,"size_decoded":2608,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"e6d00ad2a6c863a553aaf7a8cf693aaf","sha1":"4989a9c26f84bc4eb70782371fb0e47748cea0de","sha256":"1c1e47602fdfc9ee3cd8051a5745149c6557eb5fe1de727c1f48f0ce9c8a2ada","sha512":"de652921c2645ed62e2f379f606208f45c4e984346b69c078b968021ed2efbc3346a25c432825847f1c42761913f9e2af2df898643381f4c225590f61c71e70d","ssdeep":"","tlshash":"0d41394eb6c4294568ced1c621f22837865046c1e5a55c70fecacc6ba5043f6596efcf","first_seen":"2026-06-19T00:41:43.561904Z","last_seen":"2026-06-19T00:56:00.148044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260615","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.717Z","timestamp":1781830520717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:28 GMT","end":"Mon, 17 Aug 2026 08:36:27 GMT"},"fingerprint":{"sha1":"E7:51:4F:91:9A:48:E8:45:5A:7A:64:2F:97:26:D4:33:CE:C7:01:89","sha256":"5A:8E:04:C3:1E:AD:E5:2E:66:07:07:1F:3E:5B:BD:CD:B6:1C:36:19:BB:EF:38:E6:77:B1:98:44:4E:A5:D7:CB"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260615 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 19 Jun 2026 00:55:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-Rjdk75gazEEGwhqmENST3g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw0pBiEOLm-Lns0kU2gQmnnxopKSXlF8aXFCXmFecklqQWpxaVpRbFGxkYmRmYGZrpGRjHFxgAABkdEqw\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=34.SE=kpvqSsEZmTxo6cFn2860vaN0NLFyHr7-jlWkRty5D2I-Vp_2TDFvMitILXokNx09liM_iY0jkkV5_FlajR-g1GuumW1aqFxvbFBNlhJvEG6iG6WYIwwSrVoSCAL0xCAYMOYKG-DzUXvXfmz-iBptrJt24_Z4DPG1S6U0WSPyjHb2VqhH3Bc1OdlNL2bAYgsrpEsC6AExVBkzhY2ubOFK2p2o2a8E7uw_AOIA4PiruYk; expires=Mon, 19-Jul-2027 17:13:39 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.441Z","timestamp":1781830518441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5814,"size_decoded":1315,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"db4c485575cc6cc4eb57f17ce1e93d50","sha1":"3e8d8ba95f30fc55d9970b89f8b6d43f8fb7f580","sha256":"b13dc57ee78b515f23719ca2d828fd2301f02c86e76b2528b763deea3be96337","sha512":"bd9905a9d9dff716d1c86fa0dd129481b126d0e935ddf9123a30003010b2b04427fc50be389f313022b3cc92190fe379fc719fec28b1b7e663f207c65c0eaeca","ssdeep":"96:RYgEavhYgEayFZOYgEayJc+ucYgEahNMYgpachYgpawFZOYgpa/Jc+ucYgpaD3Ng:WOvGO8OawOBrcGrarbwrJou8loCGLpPm","tlshash":"0ac1bd82052bd540df471cc537cfbe269e1e9195304598696aff1cd8ecaad2a8370b5c","first_seen":"2025-09-10T23:29:40.815218Z","last_seen":"2026-06-21T04:53:57.993744Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/line1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.222Z","timestamp":1781830519222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/line1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4061\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4061,"size_decoded":4326,"mime_type":"image/png","magic":"PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced","md5":"83f77c3bc03f8c19029515830a75133f","sha1":"9fc269500873f5a76ac550b222d94308e7dda072","sha256":"b46dbc2d6c9be158407da1a910040fd4799b8f33c8f70e93f2104bc47ad097fe","sha512":"7818874835b6f2de31c35b39c1419a34cdcc943758591aaa767d73335c11e673e44e0f0724e8375cd8f50ae8d8ae48dbf22143b8f3c943c59cda54b7aec642ac","ssdeep":"","tlshash":"1e817dfe51b1994549d04133d8cb2260ec7aa1cb5738a9b69a2af9460b38db3409561f","first_seen":"2024-08-19T17:11:42.499559Z","last_seen":"2026-06-19T00:56:00.149349Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/dotline.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.241Z","timestamp":1781830519241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/dotline.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 438\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":438,"size_decoded":702,"mime_type":"image/png","magic":"PNG image data, 110 x 38, 8-bit/color RGBA, non-interlaced","md5":"941dfd5ea6172ba3fb2783cf33b7ccef","sha1":"72a209b5064499c9d42f9afb7f4fffcd9c8a0ce6","sha256":"33241f9c89aa5a261051d2f2177d5f285c08f57a99e77607471c736ea95d5566","sha512":"5d3c2b21a54ba23022d5a13336bfd3b6f74490230b255cff524c18c1d52790dc400a1595336f63a0496d18cb276b2b1e5f505c638d422a8a761b0418b64b9a5f","ssdeep":"","tlshash":"86f0dcf882e37cf8cdb64c03965475185cb0fd482d193e68124270a05dc75a42484427","first_seen":"2024-08-19T17:11:42.510355Z","last_seen":"2026-06-19T00:56:00.150059Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/animate.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.322Z","timestamp":1781830518322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /animate.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4353\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66173,"size_decoded":4662,"mime_type":"text/css","magic":"ASCII text, with very long lines (460), with CRLF line terminators","md5":"215c2a4b8369f67d26516ee0c6c457bc","sha1":"31d7b9956a4595fcbda16a176c7f4c43f8362c68","sha256":"67ca8a733ba14dfa09ea0285303f88641df2f0b62a444eef98194db9a1fa61a6","sha512":"a6636ad6393a8f1386f56dfca1749f3bc2f58bb46a39a16ec98c108d83871f9e83015a39ca9adad66b67608aa5dc59bf3f1dddec1737bb9b95330bd5e013d637","ssdeep":"192:ngXQHnT0ztT7tfWGQ26HJJVqgBt3iF3Z2d5CELSR7+s7cp1+syl4v3j7+RWEmZ1a:nSWk4A","tlshash":"815394de189310444f710b15dfda4e6cdb38e16358266fea73c2568f8b61bac128e25f","first_seen":"2023-08-04T18:08:32Z","last_seen":"2026-06-19T00:56:00.150629Z","times_seen":16,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptonator.com/ui/js/widget/single_widget.js","fqdn":"www.cryptonator.com","domain":"cryptonator.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.467Z","timestamp":1781830518467,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ui/js/widget/single_widget.js HTTP/1.1\r\nHost: www.cryptonator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay6.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.275Z","timestamp":1781830519275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay6.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4181\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4181,"size_decoded":4446,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"e50a5332f9e930e46dea131de7ca7c5e","sha1":"47d722eb8d58f7367116e8843b41d19697b43b72","sha256":"7c5c5f488ac60492d157789a79cde45ece7065729c42d7a4e9330ca749fd4b9e","sha512":"c7d5538e7224673c9243a513671fc2d9085628375a05853b5535467dd2ff5a841b4b54c8125559934401ff3d7e9ebf5d5ea918321a4c23e78c5c3c5d69753727","ssdeep":"96:0QtymtUC/sPxIL/Nm5m547jPR3SY6IGN0+IkS4MRa:0txILMm5kPRkNN0+w4MRa","tlshash":"83816e4dfe41ac491c81e81560ff95050e62db41c9b89728bdfad4225f2c5798ca87cb","first_seen":"2026-06-19T00:41:43.76888Z","last_seen":"2026-06-19T00:56:00.151188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBCABg/d=0/rs=AN8SPfoFA2LaiO2N6FUalgBtEOEzo2fo9A/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.712Z","timestamp":1781830520712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBCABg/d=0/rs=AN8SPfoFA2LaiO2N6FUalgBtEOEzo2fo9A/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 04:26:30 GMT\r\nexpires: Fri, 18 Jun 2027 04:26:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 73730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":20284,"size_decoded":4798,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-06-21T07:41:47.124373Z","times_seen":11954,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/jquery.fancybox.min.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.343Z","timestamp":1781830518343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /jquery.fancybox.min.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2897\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12795,"size_decoded":3206,"mime_type":"text/css","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-06-21T07:20:49.024746Z","times_seen":47459,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/ie-emulation-modes-warning.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.449Z","timestamp":1781830518449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/ie-emulation-modes-warning.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 947\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2203,"size_decoded":1183,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fafbc91bdf05ab4ac9c703332a330f1f","sha1":"6d22bca8c236f9c6dbed218c48055bc2c9a1d387","sha256":"69b0ac8114cd6ea7df970e491d67f1de52f841370550264d18256fca242251e8","sha512":"ecc3264aa0b0a6bd8631042adc565751fc64f20db73e887038fce914a1b86c381ee7b04fe91cd522bca85c9deffb631c43814fd80451fc1b149c28e08ecdb0d1","ssdeep":"","tlshash":"5a4113ae1921a2630732a7a9c75be005f37b431227159438b8cdd7112b72da9533acea","first_seen":"2023-06-28T16:08:38Z","last_seen":"2026-06-19T00:56:00.15274Z","times_seen":20,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/line4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.832Z","timestamp":1781830518832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/line4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2090\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2090,"size_decoded":2355,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"9030d8a7e104dda8ab3925b2286ec500","sha1":"90920eec1a5622f784786a20a14352f298f1aba2","sha256":"7987195928a28de422fc071e8e207df7fa7e5f79af3136f15be48e05252ffeed","sha512":"40c50f885dd230bcff7d9567b22bc0aa2eb4add4a31d5e2109034093f1032d0dc5399627792c11702d29eccad2f420ac397046d2263d771dbc3aa5bc13df9210","ssdeep":"","tlshash":"1a411afbfb7b651541f7a8989c4a3414db28f03964ce38d44166dc0b2b2ca5265eb21e","first_seen":"2024-08-19T17:11:42.496984Z","last_seen":"2026-06-19T00:56:00.153827Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.729Z","timestamp":1781830519729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 18:25:30 GMT\r\nexpires: Tue, 15 Jun 2027 18:25:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282589\r\nlast-modified: Mon, 15 Sep 2025 17:03:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15264,"size_decoded":16077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15264, version 1.0","md5":"21c1966f1535b75b772cd782f4bdce05","sha1":"df8c2865d1240e3eb3183d3f8fc97a047ec1a92c","sha256":"13626adc698ca3982595b130053d69e117d004c66a1449227597a86b6ac6e446","sha512":"9c94410c1c76b8fed70f9645a696f34a1298c14a62de11b34331b82a7b519096f4cf20229439c6aed35b697e7d0f4ee6fb9e78ba2bb7cea8761c1a3bdc0168a6","ssdeep":"384:uUXHu3IYTpYgOMJLD2/me3KLlixWBUL101DUgmBfbg:3MphOs2ue3KpKJeDGBfbg","tlshash":"9a62c1258e352dc6d74ec72b81b91c61c34455b3ca2ede2eda54b7085b3f0432a3681e","first_seen":"2025-04-24T04:57:47.892353Z","last_seen":"2026-06-21T05:36:26.723812Z","times_seen":1954,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/abo2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.967Z","timestamp":1781830518967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/abo2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8413\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8413,"size_decoded":8678,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"34c307654fcfef7ccf67bee5b0625b95","sha1":"994a6e4835d433317b2b3488df650a789ea436e0","sha256":"bb7e5551628e968467814b774b4edab684180c4d95c593939f10dfb24da70703","sha512":"154977fdc9157f015aba4a568b2c9e12b66e1963b6e176df84ecb83aa97a9f52d26f3317609a95a46b5f692948a947ff70fd0fa7942c095cd5d751c348c48bfe","ssdeep":"192:4CUJZpi4JjrJYier9QDJ2V4kJ0UU3JxoCRYamm:4CYZd5C9IJa4knmJ2Vm","tlshash":"f802af35ed1921a9c3a0a77b38f58227d36104f59fd7d81a21ddd0afa146668423b0d7","first_seen":"2026-06-19T00:41:43.697285Z","last_seen":"2026-06-19T00:56:00.154382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/plan-slide.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.328Z","timestamp":1781830518328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /plan-slide.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-21T08:25:52.996938Z","times_seen":134946,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.903Z","timestamp":1781830518903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2662\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2662,"size_decoded":2927,"mime_type":"image/png","magic":"PNG image data, 137 x 135, 8-bit/color RGBA, non-interlaced","md5":"5f9c761472e131b965e0ea09d12e63ea","sha1":"91b8a421043eee00e5f6bef98d912f0c5fa9bca4","sha256":"7e5a7b4c89acd959b8e5dfb5b37eb3daf71883c1e826b62bd07dc5e5eb29cd5f","sha512":"caaedeaf8727fc29b6e0ada987cce00cf0353dfbcf7fc7854f07ed86bb0e0f7b4528aa7d734a360af950ec52579c42ae79243c5af683c3b321348184d7243ee8","ssdeep":"","tlshash":"bc512e6d30803671ccdb7593513d66d3651b49091ecb2cce01d964beffe0a2591d62e5","first_seen":"2024-08-19T17:11:42.477264Z","last_seen":"2026-06-19T00:56:00.155155Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/abo1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.947Z","timestamp":1781830518947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/abo1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8060\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8060,"size_decoded":8325,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"208c5b495c7403b0fd15af5606d7e426","sha1":"91ab5984ea1975c5d698e35bdff8a44766580b83","sha256":"85be32286d80c4047f051ae31c59b488221bcdcc0ed95f367208e72fad6028ca","sha512":"31de6ba9a3b922b2af3128ca3d21f7ae968f478c5c2b223ca456ea6952d40b655778b8e8a44f0650d63b122be63a8c33cbe8a9f65ee427a1494de849da767437","ssdeep":"192:4uukg5QAdlV4Yu16jIjQBSOSRNiFsxYvp3ZHaMQtmtPEN:4uukkQAx4p6y6XCNHYvF9GAtPS","tlshash":"87f19ee1d5502cc43e72bdab84b7b311c92390c45e50e53d22c9d193faa7b77aa1a6c2","first_seen":"2026-06-19T00:41:43.792263Z","last_seen":"2026-06-19T00:56:00.155799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/arrow1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.008Z","timestamp":1781830519008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/arrow1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1181\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1181,"size_decoded":1446,"mime_type":"image/png","magic":"PNG image data, 26 x 16, 8-bit/color RGBA, non-interlaced","md5":"a1404bdac462619f61cadb0174f5e3bd","sha1":"f2de3058d3a03404994035dc176851750f9ad1ac","sha256":"a9363c5f36aba33fbed7d4fa0c8837f2cc1e82272e1da73685bacbbeb66b3fa4","sha512":"2ef0ee7c4c4ec2b11ef8eb641fadee81f365a2663c8be77f85ae3fabd622fb54cdf6be3a96b8b77a86317bdc5b5ac75de3f02635c3fe1322e25ab51fb559a0a5","ssdeep":"","tlshash":"0021a789f9813901799d9a8224f211176e3345c0ccd0d475fd8ec85b86ac3f94c9e9c7","first_seen":"2026-06-19T00:41:43.777135Z","last_seen":"2026-06-19T00:56:00.156783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.r_k3LN84WKM.O/am=BBCABg/d=1/exm=el_conf/ed=1/rs=AN8SPfo5ZLB90Mx41IgTn48WWoo1VCge1w/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.623Z","timestamp":1781830519623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.r_k3LN84WKM.O/am=BBCABg/d=1/exm=el_conf/ed=1/rs=AN8SPfo5ZLB90Mx41IgTn48WWoo1VCge1w/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 124197\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 18:28:15 GMT\r\nexpires: Tue, 15 Jun 2027 18:28:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 13 Jun 2026 12:48:52 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 282425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":431207,"size_decoded":125038,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"ad872ec12ca5b3736dd2e69be25b13b4","sha1":"e118d1bc4b4ab72ebe345edd3e9225403db243c7","sha256":"e32ad14596c11cbfe37bc3bb3cfa477b2923b1e1311887831aa5579be2027486","sha512":"8ca0aba0f9a20a00ce11e50fb9e1be1a4fcd714730b0d87f81910505758521753e690d5c9086a8716dc957e692589dca446f915593a577197541186c34187278","ssdeep":"3072:nGCj1EPEwTInYOj0tCnruYC0kuUc6bVoRCYVgIJ8vnquhZPZ1wiLdz4YqcN3JOkE:AtnH1cJQ1vdz4YJOV","tlshash":"d194d9cab3a378529262f8a1a47f0147b93dac57b44c4c6cb189d8db1eb08194573f7b","first_seen":"2026-06-15T20:20:09.235214Z","last_seen":"2026-06-21T08:07:30.752257Z","times_seen":588,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":17,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.377Z","timestamp":1781830518377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"ec3bb52a00e176a7181d454dffaea219\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 02/25/2025 23:55:13\r\ncdn-proxyver: 1.19\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3d6d3e43a53f02c8432187205f960146\r\ncdn-cache: HIT\r\nserver: cloudflare\r\nage: 3091120\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0de9143fd3e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121200,"size_decoded":21213,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-21T07:30:42.922957Z","times_seen":68876,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.399Z","timestamp":1781830518399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Barlow:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11082,"size_decoded":1340,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5faaf99245ef93eb7934df518107a0b1","sha1":"a703e7e28c5b11c3ac8a7039576f4a79750fb622","sha256":"f4f3ef6a4f66b6a08575ae18afc61a1aec66059140e1de8ba303594a9d8e3a1f","sha512":"7c5eb29058d562f351eb88c25f853536cfb14113e660f3704ea8defcb8025f73de919ae3bdba7dabf7a440a1e7221050623a99b01b787c8a6aeaeccec15b662e","ssdeep":"192:c6pAPpbFJpHTolq4MmqZRhDvkWyVlL4Pslu4ID1to9ps4om+2I/s:c6IVpCiFzmROmF","tlshash":"4d32dd920467b100eb971cd223ce7e36ee5e62617444d67a7ffd1888ecaad253325b0d","first_seen":"2025-09-12T13:46:25.124836Z","last_seen":"2026-06-20T09:42:17.312517Z","times_seen":204,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.732Z","timestamp":1781830519732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22196\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:10:55 GMT\r\nexpires: Mon, 14 Jun 2027 10:10:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398664\r\nlast-modified: Wed, 10 Sep 2025 16:22:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22196,"size_decoded":23009,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22196, version 1.0","md5":"81419bf5abb50ae075ddf1aee89da819","sha1":"4f0f26f139db2a7eee91dca038012399b3abdc47","sha256":"b0a8ad37ac45f5fb22ced461576db72e44e295107aad7a9c8a7a4bad728fd03b","sha512":"2445e12945aafa3ceb309e854253949361a3ce080197295d48b7b54fcc8d8cf2da24dc69dfaeb6c98c6a402742e4cc4bae2d12f57cc2ec3e79a676440fba35f3","ssdeep":"384:7wDo/T9qjZ6Qlb3pgWw/1n2vZvYUwVlykCtnexzuDDxlNN8fsbB:7wUQV626X1n2vRYUwlykMou/vN","tlshash":"04a2d084dae9716a4cc18aa602830aaddf76a048917c9f0cb5fb129d19425747f0fbf9","first_seen":"2025-09-11T18:14:34.493772Z","last_seen":"2026-06-21T07:40:34.704235Z","times_seen":9922,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/sta-bg.jpg","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.809Z","timestamp":1781830519809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/sta-bg.jpg HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48349\r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48349,"size_decoded":48616,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1001, components 3","md5":"ed75d87328a81a0a3bd270dc5bd91d89","sha1":"04b87e548cd2151560b22d33435a787a6147dea2","sha256":"3d46c9bec25a9818391cd49dfa39d08ef3d8b2ff0682bec6c357543f21afa8ab","sha512":"c7cc66b0ebe5238eeef376f76c5413196b183b60c1656a68d92537e3761ac58ebd401afdc8ca7f5652113c471a5abdf0913d7d356758e60d2432e198aa7b4199","ssdeep":"768:rD4/3IFRE1D/s3JEtibKo/Kl5whQFLFfjy:rc/4FCjsJ6l5whMm","tlshash":"d523e03671850c18f7e3ae748dcab1f3a612807fb443fa3bd0d69146ed140adda7a552","first_seen":"2026-06-19T00:41:43.808861Z","last_seen":"2026-06-19T00:56:00.161328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/style.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.315Z","timestamp":1781830518315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18929\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":136396,"size_decoded":19417,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"708193a783db365f84ada5d112cb65f3","sha1":"a75574513b7063bf812b45c91bbd18d5bbf5e790","sha256":"174f37004c44aa7f9b2a507a3ac2171b73caee0649d12550bd1cec6fa07d4b9e","sha512":"2db3c219782407cf373060b60597dffa267abd646044f7cfe2dad8e892b3c57507096aab87a00438626298039d6ad72fd4c5ff46a3b349e3f6946c0987fa7976","ssdeep":"1536:eUc+WKqgCmTACNXnxQ0EHZgQ4JQu3W7gQ/u8ycSTnNOVtZUt:ERCUf28ATqtZUt","tlshash":"d4d33399d90750066b339a95abb20b98cf344023da0b03bdb6f537589fb54bc5392bdc","first_seen":"2026-06-19T00:41:43.778794Z","last_seen":"2026-06-19T00:56:00.163819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.413Z","timestamp":1781830518413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2611,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-06-21T08:17:32.893218Z","times_seen":2160,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/owl.theme.default.min.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.338Z","timestamp":1781830518338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /owl.theme.default.min.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 439\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1192,"size_decoded":747,"mime_type":"text/css","magic":"ASCII text, with very long lines (885), with CRLF line terminators","md5":"0ef0b54406e7442ce89d3a947edbcf9d","sha1":"57b0420468bcd1b04e64659dd65b38672d117492","sha256":"d7c66c2c75cc0fd6c14c8acfb4b0746c69b3c06da7f95c1911b418f7137b59d5","sha512":"ebbd89d021196a14e290420edac363ca15a5f2e70c9d86260df7dbba3b91a10c15e76953b0ff76eb28fc8018d8f18bf679d0d9560089b3cab027136e3bb66fdf","ssdeep":"","tlshash":"7421fed5f105310d3023c5404bd842c7bf2ea83b5a9e1ff5f4ea8410c32e96a2aae7e4","first_seen":"2026-06-19T00:41:43.786153Z","last_seen":"2026-06-19T00:56:00.16511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.393Z","timestamp":1781830518393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Oswald:200,300,400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10926,"size_decoded":1367,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"28f5cf8e5b533ff107fa279d678f7b0c","sha1":"c671aa6a7192689af61f93c61007da6eb3d3de43","sha256":"9478dce29a03eae936991e6154052df43f834b399fb0a46737fda0a7562e0992","sha512":"a41a16a84029906fccef78b3460abde40ecb29e29a2c120f19cd866f01ea50d6559a9580ce86f59ec8d0b1f3c23e658faf181d91891d55aad0ec116cddec8e3b","ssdeep":"192:lKVL29hvUK2LV+hoJKvLoXhVaKoLvwh23KBLSphzQKSLB6hst:Qtm0kTiKU5ug5","tlshash":"3332ada2042ba480ef475cc133cf7e36ad8ea2463461c5795ffd18a8dceae211359b4d","first_seen":"2025-09-12T09:49:51.457501Z","last_seen":"2026-06-21T06:45:56.524011Z","times_seen":2591,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-8.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.911Z","timestamp":1781830518911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-8.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129950\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129950,"size_decoded":130217,"mime_type":"image/png","magic":"PNG image data, 606 x 442, 8-bit/color RGBA, non-interlaced","md5":"c9f391a6b69153bc58c2316777229223","sha1":"d1b15a7a02a0d1fc0f485a7827794f8d33ab7040","sha256":"0c36bf63cb234893834fbfe186d76b2257f68d03bf3b88383e3bcd97b319ec52","sha512":"3394258c7b130c9788b987db2c216954753341385393839e3ef374c73befe505705da41083382d06c36e28d7817c24a855a93b274b835e66f8ec6b58afe3809e","ssdeep":"3072:v3LRMfL2ZRxSvMZwO1opT1NSgGxaQLdVbEXsXVZFn7gskLmu:/LRQM3SvsAT1NSggsXYFnZih","tlshash":"03c313385fa794adb6a5dbe80c89e11274b15e065fec78d3326986af3423763cced140","first_seen":"2024-08-19T17:11:42.494311Z","last_seen":"2026-06-19T00:56:00.166155Z","times_seen":3,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/abo3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.004Z","timestamp":1781830519004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/abo3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7134\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7134,"size_decoded":7399,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"505a66815994925475348ca9bafe3b66","sha1":"30a5e8fbbe502ead9a60aa06e720681b31af9412","sha256":"e85304a566f1bc73c7b5f527892fcf488f5886f98793d187f29c764a8cbde602","sha512":"0e37d931b923fe2706eb47c0ee7b73af248d8791ccd37fe18a594d28c09f9ade55bfa8c0ebc3043a8f6461481f8df1c0f12ec3ad4e6cddfb6445388ad6d3320e","ssdeep":"96:4QtumtUOHUtJDp3r6MgQxUPbcwxjAk2qw6egy5X/ZQ7nkJ+4NMR7etE4EijSJNwO:4+SZJrRgFoSrwey5X/ZQ7nk276EijhO","tlshash":"26e190fee29dad60d441d14578797969457002d1f8dec8abeaddc6824227438094b0d0","first_seen":"2026-06-19T00:41:43.612378Z","last_seen":"2026-06-19T00:56:00.167252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/sta4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.191Z","timestamp":1781830519191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/sta4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3496\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3496,"size_decoded":3761,"mime_type":"image/png","magic":"PNG image data, 68 x 64, 8-bit/color RGBA, non-interlaced","md5":"560f3217d14a39dad6a7acd3912884af","sha1":"3b76023e250fce5754d9bfa33695a1771607589a","sha256":"3e489f5cf24b671d8a93eef992c480b2077cba28243c10af3dfb6d3fbff35939","sha512":"3836e38fdf8800c87d2b4e6302cc423b5bf30f86e72979ece5359f46a1c6ac8843fa66371623d9ed55efd7176a932b4418244f8ca6e5ff624fc415940d158e4e","ssdeep":"","tlshash":"a7715b86de80795671a47799a4ef803bd5712dc0de18fe7177984c239b2bba4041a0cf","first_seen":"2026-06-19T00:41:43.582332Z","last_seen":"2026-06-19T00:56:00.168844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner-bg.jpg","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.606Z","timestamp":1781830519606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner-bg.jpg HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 273688\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":273688,"size_decoded":273956,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1032, components 3","md5":"217d5a013c80735772bf9efffc8f4841","sha1":"8c0080979dd05785cd0862db7c5c6e020ca0992a","sha256":"6f6b729a2f02dc9ca654e7d9cba35027453fb529e0f758de606a64b103dd5a60","sha512":"655fe73d3401b6e12ee956a0fa37fd5c659aec378c56611990997d34bab228fd120d0ef526d0e58f0e1c65a4deb39588c251415db0bc0caa8dd6dd55e680c1b5","ssdeep":"6144:udv5J4mci4zK1m96ZvHZKK0ll4WVeTQIz324PGinjJ09R:YBm96J+5ETb247Jc","tlshash":"10441240f867aa948099c1de8ffcc570889d95f2a27ed011b84d9fe2f7d40276634fa9","first_seen":"2026-06-19T00:41:43.54015Z","last_seen":"2026-06-19T00:56:00.169606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/work1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.012Z","timestamp":1781830519012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/work1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3963\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3963,"size_decoded":4228,"mime_type":"image/png","magic":"PNG image data, 88 x 79, 8-bit/color RGB, non-interlaced","md5":"100e62e8a35b6192c2f1028082a63492","sha1":"7aaedf0d39b6bcc8c9a610d83e56fd8eb4dd5530","sha256":"3eb2a2664295342594324e23f1bbb7708545850cd93838db8505c09f54eac1de","sha512":"49027b2bbf836b213abfe4d4c4271ef8eeb4e05ad9f5af31b95c4a7f423d25159f945b020c1fccdc5e7d3972513f721f0157fae9bee1d620d6aa64a6cbb034c8","ssdeep":"","tlshash":"83817d0a16503c645798f97021eed13fb23945c0acb27c9c7e4bcb5d80381b4a66e9de","first_seen":"2026-06-19T00:41:43.577333Z","last_seen":"2026-06-19T00:56:00.170356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.2/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.741Z","timestamp":1781830519741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/releases/v5.7.2/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74348\r\netag: \"462806316fea535a6a57651bc2b000b0\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:52 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 117472\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiTVdbuONmtKhWokahLL7ARqHrs5j2caOz5V83HK9eCNCVPWQkoyXISzss3r7j%2B166rVN%2FbR2Ca%2BNqt%2F1%2FQyDM7%2BNDpTUKf7krDpka%2B1j9Wy5oCkLRcLPvqj%2BErnTUQdQJBK6lnY\"}]}\r\ncf-ray: a0de914c5e34b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74348,"size_decoded":75108,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064","md5":"462806316fea535a6a57651bc2b000b0","sha1":"80644191098f863f25be27841c0d92c452cf2327","sha256":"4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2","sha512":"1765952f3490a3b063388c3258bf2ed0fce4854ed7fc6fc5937ec3d0cedb1368fa24a87ebd2dd62e4ba0f6244b648cbf47044381969252b62a2677a39c6b0b6f","ssdeep":"1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3","tlshash":"007312208918f9765bb7e0be5abd05a57cb1c4abc6af40343496abc46fcf93039c7550","first_seen":"2023-04-06T01:20:04Z","last_seen":"2026-06-21T07:08:01.892666Z","times_seen":5265,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/#","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.704Z","timestamp":1781830520704,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.444Z","timestamp":1781830518444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"5869c96cc8f19086aee625d670d741f9\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:00 GMT\r\ncdn-cachedat: 05/12/2025 11:50:50\r\ncdn-proxyver: 1.27\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b1b9160e81bab8e089937fec86a3f9ec\r\ncdn-cache: HIT\r\nage: 2762824\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0de91444d901a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37045,"size_decoded":11302,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-21T07:30:42.913119Z","times_seen":92581,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/responsive-admin.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.334Z","timestamp":1781830518334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /responsive-admin.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1431\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5904,"size_decoded":1740,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e6d930c73c0b0eca136e3aeef1edfbc8","sha1":"a93079a2a3b91799de5c2d28801f7efa117b265e","sha256":"cefba1b409fc3a6a501cc7fa4fde1893fbb473f788816e301b9aecc5f2b2183a","sha512":"c9080c3c526b88a1179ea4c014aeaf322a1ac157e2a00f356eb177108876ef509e43513a7758b624f26d546eeed5dafa9a1a9dbf08355a261e4a7de9fce24239","ssdeep":"96:nBXb22vGhkaV7QQds5vyesKiHHXDA+ev+N9uxQvwqQgLG2PcMtOQdvJxDuYu7trg:nBXb217V7Hm5vyesKinUH89uxQvwqsva","tlshash":"d5c1e38da5852c08a237f9f19bb107e5d98d0073af4b51b979a07050cbdf5aa47b2bcc","first_seen":"2026-06-19T00:41:43.789158Z","last_seen":"2026-06-19T00:56:00.172736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/plan-cricle.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.181Z","timestamp":1781830519181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/plan-cricle.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52691\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52691,"size_decoded":52957,"mime_type":"image/png","magic":"PNG image data, 939 x 933, 8-bit/color RGBA, non-interlaced","md5":"f18605e3408a87c5abccdad972490a45","sha1":"a7f9419d9a417630e0de6ae9a1d0b424b2df97f0","sha256":"496446ae08712ac9f7345c0a7b4bf08c26b063fc71b4ee778b9d4f95e925c719","sha512":"88948dd461f9a4c03fcc96c76836e8bffa6c950b9c3199d6fc305c379abe413fcbd5cccf97aaf86158ebad8bbe063db793509e42e222303e035f6ade1c9526c6","ssdeep":"768:yJGkHFo0MCO9r9XHYNbefPtDdWF1lBHUcaBiQh8nVdp6dP50z2wSJyKBJOfwePbr:y01IO9Z4c2D0caBCnbU3CuJpnq5v","tlshash":"ad33027b7e5bf02bea6fa8ae3d22a897616c77128cc016205145c9f1f5c28585ccfb17","first_seen":"2026-06-19T00:41:43.625382Z","last_seen":"2026-06-19T00:56:00.173337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/sta1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.187Z","timestamp":1781830519187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/sta1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1880\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1880,"size_decoded":2145,"mime_type":"image/png","magic":"PNG image data, 68 x 64, 8-bit/color RGBA, non-interlaced","md5":"0128d60a8f855d28a59fa658cbff9319","sha1":"960e6398fdafde0b3bf7de8a94e87f58f6acf916","sha256":"a314cc87ff096f604433e678537b2ec970f3ed605500e4bb5b70ccb899e40e98","sha512":"74fe4632b78e30f7fd46c0cb987e5b4f15e8c4476d99b4521e36af61a5c3f2252468e0c3f731dff74213ec48c54341d805092492927a84bb7f02d49693c460d3","ssdeep":"","tlshash":"5041f95cdfe23500a28ed88298ef50176a5b85c4d6d4e825198f48b28d5c1f5445decf","first_seen":"2026-06-19T00:41:43.772856Z","last_seen":"2026-06-19T00:56:00.173892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/sta3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.190Z","timestamp":1781830519190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/sta3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2999\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2999,"size_decoded":3264,"mime_type":"image/png","magic":"PNG image data, 68 x 64, 8-bit/color RGBA, non-interlaced","md5":"be3d45fa7466d729c28bd0251c6af55f","sha1":"572e10a606e1b393a657db54f6ba340f1539506d","sha256":"25cbc38c1c6b817d7bb732758e3e6f93dc69a7a9c2984fa9c3782db1c49c1f34","sha512":"bb618d7632881fcc52f5d6d2ddc8065a7ed69c762ef15ee6fe94cf70b4d698fae143138b522db71c1d01b44678e91c79262225573adf4b6d9d48e740578b8e81","ssdeep":"","tlshash":"6c512adbf9c06840f608e89108fbc0a64b6254c08ce0a23ae7ab9c17553d6d61ab91cb","first_seen":"2026-06-19T00:41:43.681291Z","last_seen":"2026-06-19T00:56:00.174377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.244Z","timestamp":1781830519244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5805\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5805,"size_decoded":6070,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"147714adc0d79b78c61645a4846a09c0","sha1":"3923c2e8e98274668ddcfa33841f0fd25fc8aeb1","sha256":"c0026a6e28291d28fcc300795c4a9f3784882b7c445788cc7691d0dc610d340f","sha512":"ef3e0d4d42996522cdcf41a4cfb488e6539dddd96ffced8948307ddf916435ed60881e4e4dea651218a791bdef7c57ce5ec5ad8ed1e184ba32fb1b10a3540a6f","ssdeep":"96:0Qtu3mtUCSHSqN9Tr/yB8SYpsH0Z+uVYpvbxBmH2si2SUCvkcyXV0uzuGhbJtq:0PPH/N9f/yBUo0Z0vQH2n2SUCccyX+uU","tlshash":"cac18f7915f414c3c04ff9e164fd9917e41a4ae4a6f489a809e69c18bb2c2a52c082df","first_seen":"2026-06-19T00:41:43.70787Z","last_seen":"2026-06-19T00:56:00.175034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-7.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.909Z","timestamp":1781830518909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-7.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23485\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23485,"size_decoded":23751,"mime_type":"image/png","magic":"PNG image data, 386 x 351, 8-bit/color RGBA, non-interlaced","md5":"f3e8f73c2e0bb7f9b1bcc7ba16b9fa78","sha1":"c501f1747e6de729e439cbfacce556230dcc3603","sha256":"2992a9184d41191f8cb2746217799c6852277557c35d412ca9255671a62340ab","sha512":"195fd6b649c89f3daf4aa27effe0c929e0ed3c017762c6ec2959884b0a61edd38edc8ef99f8f2c99697f15b1f30b31e7aa29a7e1a86eb006e37b826bbc8a9d62","ssdeep":"384:iD8MXpsi7LGQABNEDDFmNX7C+OUr5urmQxG6O0dFiCY4NjMtixqS1ETIOURgVuAD:NMXpsinum5Ror5HQx/O0dFipAq/sngVX","tlshash":"c4b2d09b40d733be43e9fa320fc8cb264c39922727565bd6202c5a8df94b2447c889d7","first_seen":"2024-08-19T17:11:42.486141Z","last_seen":"2026-06-19T00:56:00.176153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/abo4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.006Z","timestamp":1781830519006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/abo4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7928\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7928,"size_decoded":8193,"mime_type":"image/png","magic":"PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced","md5":"716fd40c36bfcd49b9a3f997d7d5a477","sha1":"479dbf4dac406cd29bc4d206b59711aa75731251","sha256":"6f20f7623b2d99b9bbd3cba3362c40e83b3fe0d9c987b77ea19222d8ef39b9a6","sha512":"6bac1a179b52415dade3d79d23d764392b95ba2b553c40d10c842625132b1e1f98df2030fa9f2c0090269f7ebf9b2035d85e00dc54035bbb1f133ab1201003d3","ssdeep":"192:44eEfSLvDkQCLHB0X/Y+Aw2avRbzN67b99ZbB3:4WmmLhAYzL1bxl","tlshash":"72f1afc1a890db04b84ba3ab5b39975f7c096de03fc272f464f4a4d3d5a44a4dc298ce","first_seen":"2026-06-19T00:41:43.634942Z","last_seen":"2026-06-19T00:56:00.17929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/calcpopupstyle.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.323Z","timestamp":1781830518323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /calcpopupstyle.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-21T08:25:52.996938Z","times_seen":134946,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.389Z","timestamp":1781830518389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9940,"size_decoded":1428,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"191eadb5e039dcfce6a157049c0beb20","sha1":"495eab7fcfdf0fef622fc0fc73e2d7670d9b8ea5","sha256":"971dfce9988a4d8475b3e74775b063bfaeee14ed01e5da736143ac10b31a5870","sha512":"127ac6573244385475a050755f9da9b585ebf8df1ca3f68090f4040c9ead90765feee8fc1169260eef0c60b75e72169e58b61be92d577fc7646c7915d19276b2","ssdeep":"192:bpNmxLpNmRpNmApNmh3wpNmSpNm5JpNmhNmxzNmBNmqNmh3aNmkNm5ZNmMNmxSNb:bvWLvKvXvUwvzv+vsWJqtUghWVWInkUX","tlshash":"c722add6486ba405ab870cc163dfbfa2ad9e1151a081c4bedbfd2cb86cd6d32136075d","first_seen":"2025-10-06T10:26:33.228265Z","last_seen":"2026-06-19T00:56:00.182483Z","times_seen":57,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:200,300,400,600,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.382Z","timestamp":1781830518382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:200,300,400,600,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15554,"size_decoded":1579,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3819519f7cf9ecf979e818170b8a5453","sha1":"562d1977620727ac3c8a73986b48e9c5a2b68352","sha256":"e2c04a37ebc6d4cc1d7f85f9291eb7fba4423daab3122e97b466b5eed9993b5a","sha512":"ea2a59f45a718274477d7e351a0369ca65bd1e649033eb35131475b7b8cdadd67295b6efe266243eda990e9aebd89d1161622fb4e48470b7c057c42892deb44d","ssdeep":"192:Agwa7R3ZeHuXnXgJ63qyItlq+cJ83LZXgrV05QU3tzGqGHbE9a3u2oZKxhgho34e:FLTxjW0MG1Jl9","tlshash":"ff62aff2411ad404dba35cc633de3f6a6d4e60217155c27adffd5898acaac2a0368f1d","first_seen":"2025-09-22T16:10:32.803466Z","last_seen":"2026-06-19T00:56:00.183421Z","times_seen":147,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Teko:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.396Z","timestamp":1781830518396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Teko:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5915,"size_decoded":1225,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3f10bedc39eda6cbf7ae602bbea0ef19","sha1":"e9cf2b17bd6eb1c29363e65e70256923d9b34614","sha256":"9649bb87c2bb1b14451cab780887e6fb820dbc7118f982fd490d79cd663a8f0f","sha512":"03199b26951cd0ad5d5385b79a7516f972824581af431283a4c2eb5717eb427dd35efb4870c75b71504159db8055cb91f7a025f0e547faeeddc795f4f16fc6dd","ssdeep":"96:kO1a5pO1a5lJc+uGO1a52NnOEa5pOEa5lJc+uGOEa52NnOXa5pOXa5lJc+uGOXam:qRrNf8rAYDrnxGrKClr5z","tlshash":"d3c1ab91086b9008eb470cc263ce7f27ee0e32645460d9799ffe08c8adabc295355b4e","first_seen":"2025-09-20T01:05:37.333681Z","last_seen":"2026-06-19T00:56:00.184012Z","times_seen":405,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/calculator.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.487Z","timestamp":1781830518487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/calculator.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 508\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1927,"size_decoded":744,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ad07b45de19534791b5e3812998f58fc","sha1":"4d8e3b6f6eba70da26c01915765484fe0071f748","sha256":"a78df739fa2e80056936ca27662e844afab078f85322f8678965559920d58de0","sha512":"37f9ef17c0db6f6342cfe576c2740214aa7a4c86b6f35d0669ca4b17726e5f344de2c284bc8bec04a14262135bc1d01486025a0d436fbdb651228509e22c97eb","ssdeep":"","tlshash":"43412700ffad670943a03674b9fd12c4e83ed9623960a1a2c1b10ddd85d0675db49edf","first_seen":"2026-06-19T00:41:43.711921Z","last_seen":"2026-06-19T00:56:00.184611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/wow.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.457Z","timestamp":1781830518457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/wow.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3414\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16066,"size_decoded":3651,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a586cc49b879664d7cfff48e50dbb52f","sha1":"c90461326ec06a6d9d32c651431efb36dd7dbd86","sha256":"9ab5f1868d663b2fcf356058bfabd23a9a428f29d226fa5ac93cc3269775e01c","sha512":"57c8300d661ff408957e232dfdffc39126ed5fe3c8edb4c4128426af0e77a71e9187cd81c990ba28a07d96bd10ab1a4852322905905293c265836fe42a45ab33","ssdeep":"192:iF0VXSXMk/JCpC22iNVGHOFqWjJbY4JGe3dSDpKJCpyJYsduDjgXiJKQtG0Q:dxAMgoCPiNguv1kEfdSDpnaYsdudgaQ","tlshash":"7772ff893a5a31618737b37ecf5f8108fb39166f11551158be9c8ae41f7092482eaff8","first_seen":"2023-03-07T21:41:49Z","last_seen":"2026-06-20T17:45:29.862874Z","times_seen":832,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/sta2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.188Z","timestamp":1781830519188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/sta2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3690\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3690,"size_decoded":3955,"mime_type":"image/png","magic":"PNG image data, 68 x 64, 8-bit/color RGBA, non-interlaced","md5":"db1f78c27e26e96484576d0b417377c3","sha1":"6d3e7a93173045e3ecbd087102514885a8173207","sha256":"f8b1504fc6295196940e13c8c66d63b0053c028e3ce5c14447bf927702b6c2b6","sha512":"5136ead295922f81d6bb149f2fa7b14878ae721483f214148a8a42c01e84471bee04ed075239eb6f8697874cd7bf0c0360c46f427509cfba823fae9380e01068","ssdeep":"","tlshash":"407129ded20139827589edc114e753054b39088a9e81daeb5a9dc03a886d2f5a81f79f","first_seen":"2026-06-19T00:41:43.780832Z","last_seen":"2026-06-19T00:56:00.190317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Josefin+Sans:100,300,400,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.423Z","timestamp":1781830518423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Josefin+Sans:100,300,400,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6390,"size_decoded":1235,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"557051ea25e3f50eee3f6dfe2972eb52","sha1":"69d6cd9e91ba8cc00e52f3630be36650a00e19d2","sha256":"f054f2239dc59a98c8999ec18bb4083cb15c2f7028c80f50c8a7b36ce71e761d","sha512":"598677f813caf3cc0a01d0e2d05b40baaaee6a3cba824ee31b69726f5ee251986c40830e0e8a0864e01acf13954fe12fc7fde3d3bcdbf7ea92dad28475e35c8c","ssdeep":"96:cEOS0axeOS0axNJc+uwOS0ax7NDEO1axeO1axNJc+uwO1ax7NDEOEaxeOEaxNJc5:cgp4pjnpzKCjXzrjj+zNFj0zOmjbU","tlshash":"9bd1ffd10466e6a0db831dc223ce7d229e8ea1593450c978affd18ccec5ac2d6365b0c","first_seen":"2025-09-16T05:19:50.410787Z","last_seen":"2026-06-19T00:56:00.192222Z","times_seen":22,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/line3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.229Z","timestamp":1781830519229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/line3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5415\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5415,"size_decoded":5680,"mime_type":"image/png","magic":"PNG image data, 173 x 173, 8-bit/color RGBA, non-interlaced","md5":"7f381b6998263f8968f16bc438da9eba","sha1":"b4c1526ce88d28cf0827de3e00e22c3c4529c60a","sha256":"2c5ebef7f433f22c99ac5b2d4dd5b732e099b2ba3f0b3a9eb213a2bdf296ae6b","sha512":"ca9d7a2ae6fe2c669f1a7fcc392f5cde666c5853d7b9a002fa7ef3f6601c75d89677e50cd275379001ba16f043a0dec550c7e98d19f3562e3d7157e35bce14bd","ssdeep":"96:EZTWcJ+z3G9WlcLyKjGJ22URFlK5UcG6eXKodDQX3vxbKjqCShZ2u7A3TU:EZC3zjlcLyKqHUblff5dDs3vxbKjq3hv","tlshash":"d0b18e6ee8f0856564c25a84c9e50ea3c228d69baff6df2f40d351c0201db9d92e7471","first_seen":"2024-08-19T17:11:42.507106Z","last_seen":"2026-06-19T00:56:00.19332Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.239.38.223","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{b7258d7b-ad98-44a5-960b-4ac805dc5bd4}?https://paxasfinance.com","date":"2026-06-19T00:55:20.557Z","timestamp":1781830520557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:12 GMT","end":"Mon, 17 Aug 2026 08:38:11 GMT"},"fingerprint":{"sha1":"26:CA:50:BF:FC:D2:67:81:11:6B:91:A7:5F:CF:26:B4:FA:AA:AF:2E","sha256":"22:85:EE:92:AB:1F:D9:B3:48:C5:DF:FC:35:22:AF:1E:11:FE:DE:52:18:CD:E6:28:21:E6:A9:D7:5D:FA:9C:07"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 19 Jun 2026 00:55:20 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=532=lYp7hHu5wT7BOFpvX5Bf3ZlGmlty64A8GA6FYICQaVAi_q2Qqkc7uNJLXblwISj8ZDoI9pzbv1fcJQ3Dzo8AzAqcpOS0XekfmV2c1vj7eWrH5kGDSMK7lddzSkQ0u9lt7VVywnkmVj9mJSEzfBnW1c_8R95W_aEsx24wwv6ISXuT-z_nCplrNxfnGM9yzn1UIqF5gKVlBQgTV6VMcpEdZVHHCJueERT-; expires=Sat, 19-Dec-2026 00:55:20 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Fri, 19 Jun 2026 00:55:20 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31482,"size_decoded":3502,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-06-21T08:18:31.21783Z","times_seen":1481,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":37,"connect":9,"send":0,"wait":26,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.721Z","timestamp":1781830520721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:19 GMT","end":"Mon, 17 Aug 2026 08:36:18 GMT"},"fingerprint":{"sha1":"29:88:63:13:7D:77:C4:B7:BD:5B:53:D3:3E:6F:29:37:9F:14:93:44","sha256":"E4:13:4C:BC:32:C0:C0:97:65:99:C6:84:AE:0B:6A:C8:49:B2:D7:55:46:D9:34:DF:DB:61:1F:A0:D9:A0:E9:CB"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Fri, 19 Jun 2026 00:55:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-06-21T07:44:17.571879Z","times_seen":74972,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":2,"connect":26,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.429Z","timestamp":1781830518429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":2611,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-06-21T08:17:32.893218Z","times_seen":2160,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/css/bootstrap.min.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.445Z","timestamp":1781830518445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-21T08:25:52.996938Z","times_seen":134946,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:200,300,400,600,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.360Z","timestamp":1781830518360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:200,300,400,600,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14630,"size_decoded":1566,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"09b9ae90c9e70b23303fae7e0120a6db","sha1":"bc97f3cae010ceacd24166b590032c076465be3d","sha256":"ddaf9a3260dc453940e6ce3732abf8f0cb645e7f8041da92a629d0932c55135d","sha512":"585e3672473523ae1b192f660c274edca8c70fbaeeced407e7ddcd88e5f03ecd4ef408d304966f75299794b140c4d84c9ede5cbc7e98bc0e629a4741eda82433","ssdeep":"192:igywZR3LUHE1n1Cb63gYIv3q0eb83JLXCpVGrSU3vBGgMH52fa3EcoLAxjCjo3Km:HZHfPkMe6jZr7","tlshash":"e462bff2411ae44897a31cc623de3e769d8f60207185c16adffd5858aca6c3a43b4f6d","first_seen":"2025-09-13T16:59:20.919627Z","last_seen":"2026-06-21T08:21:45.150209Z","times_seen":237,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/wow/0.1.12/wow.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.455Z","timestamp":1781830518455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/wow/0.1.12/wow.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:55 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 60882\r\nexpires: Wed, 09 Jun 2027 00:55:18 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peXcJum4ZNrZYzGD9%2BowvE%2F7aMOXSSe3%2BY8WBQegUwiATnz4ejTGGYYfc%2BKVLeMj1IuxaZ%2Bo%2BDoe9zeW87yB8ZsjUpEisC3%2FOdoKnrRQIbPh%2F98EDyuvOMxbwl7aGRD1%2Bc%2BsgK5%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0de91445f7756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6139,"size_decoded":2873,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6108)","md5":"3ca2644d1da30f25f9391d2436e4f26b","sha1":"726770317740c2f772c62967ab11460cdc38624b","sha256":"ff8c1eeaabf27111c1f4a10651da1e10917e912db6a54cdc7a753d27bedde956","sha512":"60b456b4784ddb185c2e05fe4a0b0278113683ed43e49af79c957e09184891e0a1c775d92c3388940b43e9e7f250ce46da35eb9057e38c84b3ef44d1f8b97a9d","ssdeep":"96:tGqKWTAs5kF/suCJ5waOVEE1FnePgJqg4SImYadsQ:43s5EsuCJ5fOVEE7ne4JqgpIwdf","tlshash":"6ac175c9b7867035c79ba1f6873f0105a23a19acb418447cb6f984e57d348a99237f7c","first_seen":"2023-03-07T12:58:05Z","last_seen":"2026-06-21T02:38:15.392202Z","times_seen":632,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/line5.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.233Z","timestamp":1781830519233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/line5.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1104\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1104,"size_decoded":1369,"mime_type":"image/png","magic":"PNG image data, 58 x 58, 8-bit/color RGBA, non-interlaced","md5":"033945db3c38bc7a2eb3bc565a2b20cc","sha1":"04159c51f1fbe63bb47e64138019d1e337f30050","sha256":"a4de5bb59e0c766d9b66b98a92a31dc73e0bc500efd1f8a5e9e6eeec199fedf7","sha512":"e35445d35c6d73aff1ea4a76a9a5034e2c6b3a619e1bcf1df188a39b9ffa773536c188796e4fdad9816250bfce037cba69c410bea9b31d137f2fdf1bd5f7b161","ssdeep":"","tlshash":"4111b6d4ba1b8eb1022f23acba6143c2c47e42a99634671a20448b5d0f6cc15b5cd3e5","first_seen":"2024-08-19T17:11:42.512933Z","last_seen":"2026-06-19T00:56:00.197067Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/footer/circle3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.236Z","timestamp":1781830519236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/footer/circle3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3334\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3334,"size_decoded":3599,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"9cca8b4bd735a273cd2557efd648d8fe","sha1":"42cf56c2cced45b1e83fbf6fd3d6f0596ab38870","sha256":"0b7447260d426fe1cf442b0b7f57e212e0b2589532be2e3c339159825d2223d2","sha512":"8d1322452df3347b00f2fabb3031c5506daddef16b5520002ea2227545fd9aec005de6db7abfcf5004230a809a960e9d3812a1c5aa5578fb2354a9e044a9a5bf","ssdeep":"","tlshash":"42615ce007570e938bf2b7f459a1114c5920a2ea4af0289a4909c5baa71c7f22eb5d99","first_seen":"2026-06-19T00:41:43.648036Z","last_seen":"2026-06-19T00:56:00.197658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/foot-bg.jpg","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.812Z","timestamp":1781830519812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/foot-bg.jpg HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33000\r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33000,"size_decoded":33267,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x851, components 3","md5":"25ee70642f806e475ab8914ea86f7914","sha1":"4fc931117f53bab7a83ed601762a8bed5c578b66","sha256":"baa7e078c4c02c6d7c8993ffa4564fa7c2da8008abd427c520c54522c6e3f36f","sha512":"0cc650e9a45b7a719508bdbf033052a877bc3a8bdc416c7ea992ce0e73db9fe6de2185a0b6b075b067b7c954c2703315a42487763532743908a8de120e2c191e","ssdeep":"384:rRSvopuEBj3tO+ryaXcp6acNKUfEaML5lGO:rRpBj9O+rEATNPEaMfGO","tlshash":"04e29d85409c8e37ccf05af5a692fede16d75270be7d80916cb4185be378492780a24b","first_seen":"2026-06-19T00:41:43.778031Z","last_seen":"2026-06-19T00:56:00.198349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Fira+Sans:100,200,300,400,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.431Z","timestamp":1781830518431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Fira+Sans:100,200,300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22141,"size_decoded":1729,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51bfed985eec54499fa6dafa304d0160","sha1":"c2572bba5da461690c8e83394606b6cbb07541ba","sha256":"2d9f9b4a39d173b68fd214045cbeeba486313ca9f0d5962af074045f4bad6193","sha512":"24a8cd487243d17c8cbb2103002cf69714a77d2e0a24c840226de556a5a171cbcddb4ec1b573d198bd3e1d7fe30d6bfa780b00265e78acc07bfdd71392ad3657","ssdeep":"192:bpYLpYp7JpQ3AphpAZpPpsBEo3Z3m6/yzvK/3qfFppMS3Sx3LYj07ABP6R3kH7bd:beLGjAAnur4wQ7JYI00BpMlgF6","tlshash":"58a2d1904066a188ea971cc173cf7e335d5ea1126061c5baaffd2c88dddac362374b5e","first_seen":"2025-09-14T13:03:17.379458Z","last_seen":"2026-06-19T00:56:00.199283Z","times_seen":74,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.242Z","timestamp":1781830519242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4342\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4342,"size_decoded":4607,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"f84e12d329b7c78d00cd9e74fd693a59","sha1":"de2399a814516f31293928abaf3e246430b0e8ec","sha256":"4d21594626f18cc5251e45d72c2946b0015bb5bc1afa98b112018c1a524c8d54","sha512":"71f1b265be39e19eb35c1567e13955292cc6cd36c7935a78d641883f381ec2423262c5faea249ffb7321a31af1e582b207b7e6bb9782ad4d9b9f10c77b5f1a00","ssdeep":"96:0Qt+mtUWcfQpD5TDTLQ+2qx7aWPvyZrflJL:0dQpD93NxhCflJL","tlshash":"d8916df9d1c5294390d4384a24f72207566bc1c1e989657660cea4e3ca77db64cbb0ca","first_seen":"2026-06-19T00:41:43.841434Z","last_seen":"2026-06-19T00:56:00.199851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bai+Jamjuree:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.437Z","timestamp":1781830518437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Bai+Jamjuree:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19252,"size_decoded":1565,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c7eac56b5f88743d29459066d6ff28ef","sha1":"9d0b72811da73d19ee52f3d3ec26d88417d5f689","sha256":"cc39b69efb88d7be98b58a7445084f424692bf1b0f95a63721ef73da8ffa2ec9","sha512":"6884df7d08066dd11a4529ebcfc94db9dd3bb701ee5609bdffa0ca1a3d3b84d43ed0e4c9ca2c3be0e32de0f458a69fc8528be74bab3fe6768b42a8b6bd835d50","ssdeep":"384:DKhrWa+hPa+rh9K4khJkEYht4ILh6TAtttO2k7U:VX","tlshash":"f3820f900026e700ea4f1dc162cf7d3a9f1f61b57451c67aabfd08dcadaad2223a574d","first_seen":"2025-09-26T16:10:28.34872Z","last_seen":"2026-06-20T13:53:16.975538Z","times_seen":140,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about/icon-4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.905Z","timestamp":1781830518905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about/icon-4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5367\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5367,"size_decoded":5632,"mime_type":"image/png","magic":"PNG image data, 173 x 173, 8-bit/color RGBA, non-interlaced","md5":"9579fafa8adf15722d17bf392df374b5","sha1":"50aa78fdb06f84dd47fb4b118392e58465fc07c1","sha256":"bba1e741f872e8f4763931e8c32b2f095dbe535dbe3087cbf7f11d480eaa15b5","sha512":"f13968cdcb20b8a9b64ab72cb8c820776e1b4fda2415ca5980d5c9d631b7b524cf3e3165d6994eea1f35574d40c58cf2636bdf82dc03be4f41d85ab2854f59c2","ssdeep":"96:LC8KOM2omLS4olreLCkphz0SUaYkNQa/xVrCm8CRUY8pFSKUNbagrIoyVBmEF/a:xKNWwMCQOSUaHWarQCKPpp8pyV5a","tlshash":"1ab19e871d266988c3bc3d3df2bfbdd1f7d646c49086d5c2516cd4a20c60b29997eb01","first_seen":"2024-08-19T17:11:42.485312Z","last_seen":"2026-06-19T00:56:00.200552Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lobster","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.357Z","timestamp":1781830518357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Lobster HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1727,"size_decoded":1213,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8cef77ad9202319a5565f64ca29e557d","sha1":"0740fc69c9f2a827179f2e9cc84a243575199984","sha256":"1008716ee01d5bcf7a109c8391c4c45b94b9f8453bef744a3a5bc2b30c33302c","sha512":"177967431f82e2e187192b4753a63f5b5786a0b90a7eb5bbe0d30bc2d5ddab8382704b2621a43fbc14b38ffebf980f0e7044b2eebe691a0f9c6f42165ab5e9b5","ssdeep":"","tlshash":"f131de95802be400af833cd623de7e369d5e71443444e8365bfe1ca8aca6d3653a0b1d","first_seen":"2025-09-09T01:32:44.560449Z","last_seen":"2026-06-20T15:15:02.207204Z","times_seen":872,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/jquery.min.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.458Z","timestamp":1781830518458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/jquery.min.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29242\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85660,"size_decoded":29480,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"439b16301fd7737850f1d5e183339091","sha1":"bdf4341e4e6396f88f789ec58cca5aa2a4c02d5c","sha256":"8d43e17b5ed00f2de537a8847e7eb2df8d54ee1354c62748bbaa8dfea5ebf93d","sha512":"8a00cdf8e8e5ddda0ad3ad966245a24107da034af9e37a36d12ab392ae56e32b0e740e4947b0ebb4ab1ae8a4be64707fbc18fa0db9243455f0aa305aa4e49cab","ssdeep":"1536:PYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOi79xfWBZLBjda4w9W3qT9a98N:+4J+rlfOM9xACW6T9a98Hrp","tlshash":"d483c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T14:14:22Z","last_seen":"2026-06-19T00:56:00.202323Z","times_seen":94,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/cer-logo.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.009Z","timestamp":1781830519009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/cer-logo.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18287\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18287,"size_decoded":18553,"mime_type":"image/png","magic":"PNG image data, 140 x 118, 8-bit/color RGBA, non-interlaced","md5":"ac102960b2140b607944aebe05bc07a8","sha1":"e2ea7fd6f4babe1eaffb97046ab01d95059f7e97","sha256":"0b67f5837ccb06f2056162916f1dec09ec0bae49fd79a6fbb535110a0ddec731","sha512":"f4dc8e8c467802af61b7d498f41684cda51664992db7982979ec27e7179f843cd01fbe64f2f0a11ae6f80f347bae34321784598d81dc8061435e4910dc5da484","ssdeep":"384:KEyL+kZDzQeBnCpDATWL3bgDFQX2ZiKiCVFwfgrOsedgsps:Knf5zQeBnCheWLUQX2ZyCVFROjZu","tlshash":"4482d16da6996dc18128981fa45db0bb8a30cd86817015105fafec4533a66fb6f0bf4b","first_seen":"2026-06-19T00:41:43.644345Z","last_seen":"2026-06-19T00:56:00.203678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/join/icon-1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.184Z","timestamp":1781830519184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/join/icon-1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57869\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57869,"size_decoded":58135,"mime_type":"image/png","magic":"PNG image data, 405 x 412, 8-bit/color RGBA, non-interlaced","md5":"0d23eeb93c6be9fb102b68e873b7092f","sha1":"f19e9d48c2c5f2f49a61a78cae008dd80baf2b5e","sha256":"7bed36e60e85b54fd20a06ecdd86dda4af0570d95746083c9fea7e1a2033cc97","sha512":"e82824c5954414c2f3c476eee9312ed7dd50be5b2d581ba8f323c3ef3c4e4be68f9a1799d8fdb5561120156a48287988443ec10ed5431baf50cdd8614805991c","ssdeep":"1536:J/41EvSKCtuPr8ehS1Tr7LgUiuk3SjkVJVlTuMP:J/nSK2uPo197LgUiuk3t1iM","tlshash":"0b43021eaf4ec66f7c5d2ac1d27af8b7bc2454a64b60536917c533ec618ad0017acd32","first_seen":"2026-06-19T00:41:43.796199Z","last_seen":"2026-06-19T00:56:00.210186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay3.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.245Z","timestamp":1781830519245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay3.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4405\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4405,"size_decoded":4670,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"2a6931b2e1702dad27105cf53cb93e65","sha1":"49190a282a7bfa43047986bf3b7effc0279567bc","sha256":"2b51a2b26165a7689323f1825b1be1915ecf32bff38c9b38366d478752922706","sha512":"4fce38684a8c6c716dfbd3386878a3a40e6f71036c675c8b370602ae86f6102f6d9191547235deaa7fb4b9ded97b3e47ddc4c4ad96ad8101b1579fb8451e42f1","ssdeep":"96:0Qt2mtUmTxoAHL4tf7paADgum1XaM3vfP3Pq4aiGR:0uNr8t1D9MXaM3v/5fGR","tlshash":"1e917d0e96c37450709fad46e8e207825410ef4269b4f57a65ca8c8f0a39aff9c1e1db","first_seen":"2026-06-19T00:41:43.526191Z","last_seen":"2026-06-19T00:56:00.212062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.743Z","timestamp":1781830519743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 12 Jun 2026 18:12:11 GMT\r\nexpires: Sat, 12 Jun 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542588\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-21T08:33:23.116479Z","times_seen":290138,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.372Z","timestamp":1781830518372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Oswald:200,300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10266,"size_decoded":1355,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1cc133a90e2f42bb150b6ea0c9f97df","sha1":"912fafb9971d50766d230f50b12bfc0cbdced24b","sha256":"fafd26cfa100cec90090a795113bad5efa34c33aa87360e129683e9c307cf395","sha512":"dfa1107b195ec23d0f48a041f4df71263a5146946b7add9368fc9158b3e4ed3a4e9ea9599ab44c82c49f7c4da65f98227598558bd2e1be11cfc971498672648e","ssdeep":"192:3KHLcfh9mKcLH0habK9La1hHwKaL9yhcVKDL47hBSK4LDQhOt:6rWuc1So0HG6X","tlshash":"4322aea2042fa4806f471cc533cf3d329e8ea24574518975affd1ca8dca6e216369b4d","first_seen":"2025-09-14T23:19:29.11902Z","last_seen":"2026-06-21T07:24:59.151829Z","times_seen":1394,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/refer-img.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.183Z","timestamp":1781830519183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/refer-img.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 127048\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":127048,"size_decoded":127315,"mime_type":"image/png","magic":"PNG image data, 749 x 541, 8-bit/color RGBA, non-interlaced","md5":"b5985f75481c61df10cc37b445e11886","sha1":"4e7b30e0b7644450478e710ee5fab8fc10442d5c","sha256":"03667d31832c0a2882c2cea9ceb66dd0339fc7e52b33458fed2aec6cfb757c3f","sha512":"8017a251da560245598cb5742bd0eebdaeea269d76c3ccf74ec5df5450ee425188eecb00caebdfbb773d1ed614169b2389d83b18713a1b838d5f6f8e3062d25c","ssdeep":"1536:JBVeYL1zNCUoJgYqTYJYBOM06sCTOs8RccavMjWum/cuyqhZYUu5+3+maUyCc/5L:vyJghYJkGBcyDEy3+umaUyCq62MZdVXo","tlshash":"dec31205465c7924d0dc937e54b622bd0ae37088749d4553e8bdab29d4e224fb3cb8ef","first_seen":"2025-11-03T15:11:27.98593Z","last_seen":"2026-06-19T00:56:00.213917Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/join/icon-8.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.185Z","timestamp":1781830519185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/join/icon-8.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23485\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23485,"size_decoded":23751,"mime_type":"image/png","magic":"PNG image data, 386 x 351, 8-bit/color RGBA, non-interlaced","md5":"f3e8f73c2e0bb7f9b1bcc7ba16b9fa78","sha1":"c501f1747e6de729e439cbfacce556230dcc3603","sha256":"2992a9184d41191f8cb2746217799c6852277557c35d412ca9255671a62340ab","sha512":"195fd6b649c89f3daf4aa27effe0c929e0ed3c017762c6ec2959884b0a61edd38edc8ef99f8f2c99697f15b1f30b31e7aa29a7e1a86eb006e37b826bbc8a9d62","ssdeep":"384:iD8MXpsi7LGQABNEDDFmNX7C+OUr5urmQxG6O0dFiCY4NjMtixqS1ETIOURgVuAD:NMXpsinum5Ror5HQx/O0dFipAq/sngVX","tlshash":"c4b2d09b40d733be43e9fa320fc8cb264c39922727565bd6202c5a8df94b2447c889d7","first_seen":"2024-08-19T17:11:42.486141Z","last_seen":"2026-06-19T00:56:00.176153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/sta5.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.192Z","timestamp":1781830519192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/sta5.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2404\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2404,"size_decoded":2669,"mime_type":"image/png","magic":"PNG image data, 68 x 64, 8-bit/color RGBA, non-interlaced","md5":"7462a8881231ff8d6700e157a14a1745","sha1":"51dbfcc2b2a696df5de73e786f5735758948c037","sha256":"d64d488eb4e600b0612d127194444ab80a4f86368638eb3e364613244cdb8fa5","sha512":"c0233db65052b08965fe8a1d94e6044430b5d1901fed827afb7692b13aafc37eafea4e64dae0a74fd7f9ea8163c3cc03c1256f8c2915737153e3f1c7a74592fc","ssdeep":"","tlshash":"02413d6afd8235458066b80298e5f05b4fabc5c0d284f1756d4fcc2645f19fc546c4ce","first_seen":"2026-06-19T00:41:43.85898Z","last_seen":"2026-06-19T00:56:00.214694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/inner-bg.jpg","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.587Z","timestamp":1781830519587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/inner-bg.jpg HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 161015\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":161015,"size_decoded":161283,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3","md5":"485a1623b016dd39531fcd3ba956758f","sha1":"dfe2482dd98ad85af0b598e442264b40f3838e97","sha256":"2c5409dee893979b2c6a47ac224e00339245b60e3a2c747a873c3cc0e1d7ffd0","sha512":"9057ccb744990483f272a9c7f1197f7e34e15927800c9c1955ab9d7e0edc63414e74749a4092deac7d41e9235353f4f2e1ea5083a596eaf31ec1ad236bfda309","ssdeep":"3072:XeMeZL7InkuyajympMCf3ihkYKP1yJ4wjYebWyqQanDt9vV5CZrSJZfi:XeMeZL7InkuyajympMW3TPc2yqxDt9vm","tlshash":"48f3e10af83a9d8b9f902a2c9d9c54292b0d12f3407cd51eb66e5de3c7f436f492658c","first_seen":"2026-06-19T00:41:43.766747Z","last_seen":"2026-06-19T00:56:00.21752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/about-bg.jpg","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.658Z","timestamp":1781830519658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/about-bg.jpg HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 11 Apr 2026 23:34:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 178291\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178291,"size_decoded":178559,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1222, components 3","md5":"3a01698ed01cee158ade906dee10371d","sha1":"005ad95ad0b4936ac1c39e373dfdde1fbadfc904","sha256":"ba4eff37182032a502244c5d5277f777de2ed7049d7fc180312e6aa7ef307d2e","sha512":"e33f815d09e1e8f9859be6d4390c48f593e0df6902267ecef993fb4e668ec2fd80b2701267a2f4a238857a0dac7ebe2b248ccedbd57f350a40c303f58982c47f","ssdeep":"3072:azkf1yoyctdU0cU6gYbz1pkv5h1KuSaGJNN21C29QRCakVNmqLxgalwfULIkna:azk+actR1pkv5bpSa6AmaVcmgK4kna","tlshash":"7604121727a26a23c5d9d734d9f7169abf1948f0c296028d4bb408e239a53393c6f377","first_seen":"2026-06-19T00:41:43.627298Z","last_seen":"2026-06-19T00:56:00.218275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T00:55:17.073Z","timestamp":1781830517073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=694fc317d3caabb64706fbc631e0815f; path=/; domain=paxasfinance.com; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 19 Jun 2026 00:55:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:3.3.6","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"BootstrapCDN:3.3.7","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":52410,"size_decoded":8901,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (454)","md5":"8b3a0257b23fe8b69073e7d3877c6112","sha1":"bc17c0e98742559eb289ec8dd1a24acb20a9c9cc","sha256":"384abba3cbf0865a8f16e13eea53baf31d5f874e40454b26240483d70104e9dc","sha512":"339b165846d24413c7b08cabfa9708f8de4ddcb6a61904d0cdb877ebcaece88ad2525105337c868042789d8eee33fba7bf2d372ce7c23abb267a42e32dd0b5de","ssdeep":"768:7UkS7/o8TZuytXV3Ik0beLPNzXR43WVDg:7Q7fZ/tXVdLPNzXR43WVDg","tlshash":"36333e2168fc5167015251c1b731ba1f6ed6e927ed2b8a40b6fc0ad46fe3e8bcc1b509","first_seen":"2026-06-19T00:56:00.219155Z","last_seen":"2026-06-19T00:56:00.219155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":31,"connect":46,"send":0,"wait":590,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/circle1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.861Z","timestamp":1781830518861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/circle1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11256\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11256,"size_decoded":11522,"mime_type":"image/png","magic":"PNG image data, 122 x 146, 8-bit/color RGBA, non-interlaced","md5":"069b8c046d5154d36cde55d98a1719f2","sha1":"8f96827f439dd5e568924dc2764a6497e5379a3e","sha256":"791850e8260c94603cf70009a973dba89a9947830b960d6ab728137bc376c084","sha512":"8ddd056a3788051df9ed28e26a06b050cac727a64749628479afc1b54290d47e6d1eb088e5efeda4d866d8ad1750ea3b0528f38a84e2b2c80aae67ecc0061d53","ssdeep":"192:Ylnz3f1//lJ5Jug/Pp+wovMib/78QMXLXCGb1DGLACmXuZ3Q/:o/H5JtpBzinQbyAFCmXKQ/","tlshash":"1132aef72704c15d8cfecc48526b46249e34ee90d6ee26b56d23a01a743f33e50d5a68","first_seen":"2026-06-19T00:41:43.586987Z","last_seen":"2026-06-19T00:56:00.220443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v1/coin/feed?fsym=BTC\u0026tsym=USD\u0026app=paxasfinance.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.768Z","timestamp":1781830519768,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /serve/v1/coin/feed?fsym=BTC\u0026tsym=USD\u0026app=paxasfinance.com HTTP/1.1\r\nHost: widgets.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:30.689Z","timestamp":1781830530689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://paxasfinance.com/\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://paxasfinance.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 19 Jun 2026 00:55:30 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":524,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.312Z","timestamp":1781830518312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 12:46:36 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 15491\r\nexpires: Wed, 09 Jun 2027 00:55:18 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTQzl0BLDD1m04Ir7ZihrtMjMBjZqH%2FgMAuyv6sbTSbD0QbsLm02ASEU4ShjdZwFO0G1SRMK4rf%2Fr2cZVulcH8Sfk%2FOKditDWEOleST%2Fyr9zhxmTqOI%2Fb2M%2FmkDg5YfPJrNA%2FhNm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0de91438f3156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29063,"size_decoded":6317,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28900)","md5":"4083f5d376eb849a458cc790b53ba080","sha1":"fb5b49426dee7f1508500e698d1b3c6b04c8fcce","sha256":"008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420","sha512":"e2e1991e96c3962371880bff43364da3fc9bd85b405feaa20dbef2a415a211d2505fc3ee829f0cea297949190df2342b0cb5ac877aeb3c349745fdc3c0560cea","ssdeep":"384:Uu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:flr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"a4d250e8e54c01d66731c48bff81b36862b6f73dd5844d99f01f690c29d22a522c5fba","first_seen":"2023-04-05T09:56:39Z","last_seen":"2026-06-21T07:48:38.469646Z","times_seen":20091,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/jquery.simplyscroll.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.347Z","timestamp":1781830518347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /jquery.simplyscroll.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1258\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5402,"size_decoded":1567,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"61ced84daed97e8a86cc005152c5aa41","sha1":"59cd587ffaf7dc9faa883bcf524efb6c6677543f","sha256":"3fb3afdadec5eeb06034452ca9f993248f3bd50c448f9f5e08962712d5071ddc","sha512":"a3163e835b41d08e13e80b50adaf074aeac8f1a76eafa88e81e8a6141876af72e9f5df991a8a8996b4c446f269bb126d40dbe279f83fd10d1b315a1ca50b628a","ssdeep":"96:Yv9H+yF+BokcsQVR2KIOpZWArv+Vg8f5noP7NX+pUwASeKGqHdlGS+tDg:qz80hAh","tlshash":"44b18809b985b1054bcec152e17007b7cd29d0cb822b05adf4a66db573c4abe03e15bb","first_seen":"2026-06-19T00:41:43.77075Z","last_seen":"2026-06-19T00:56:00.227258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/calc1.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.715Z","timestamp":1781830519715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/calc1.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6135\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6135,"size_decoded":6400,"mime_type":"image/png","magic":"PNG image data, 66 x 65, 8-bit/color RGBA, non-interlaced","md5":"9935c4b1fe2346bddf1890ebc2c690dc","sha1":"8a0c0953257b43d3d803a7f825d928c11ff36dd1","sha256":"d4a05ac08fa514ff8cefda5660dbd8ff4964411963105cbcfaaa6e2c6b8a777c","sha512":"45987ecc31bf042973e5c2c130b0bfb6416d660445a6f1b900f42f32a9c993a7ef3f5fa5b2fe535111ef9c96e4b0acd65efe0ae185d196b5818ee281eadcbd62","ssdeep":"96:vQtjubmtUhazIyKAn/OEwksMgohIbCL8BCEjt3oS5RAl87P1yEYP:vYIQrP/ZJL8BCEJ3ZMlsPIEYP","tlshash":"cbc18deafef1652bcd5cb9832af18387e04a3951c9c1997952ac44c18911afe4cf8dd3","first_seen":"2026-06-19T00:41:43.613801Z","last_seen":"2026-06-19T00:56:00.2337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay5.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.248Z","timestamp":1781830519248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay5.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2470\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2470,"size_decoded":2735,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"36e16cec0ababcae02e1725aff82c5ca","sha1":"398d391f37ef4d6e5adbbfe2eb712b6cad2a36fb","sha256":"7b0a53ecefab3ecd985aa94b90d1a89f0c60c29e85c429ff470fffd18cbecfca","sha512":"709c432f04ee6257d0814ea1b18e817f9d761d3288379b677f3c7e1bfd2ceabaa6d2805ec0cf6fef9688eff89e40404e60a371b2174b75c1dc0ca7c4ea21b632","ssdeep":"","tlshash":"4c515d81dec0a4414352fb42a8f141b35a2bda81ed15c90aa51fcc5ed2653f185bd5c7","first_seen":"2026-06-19T00:41:43.873844Z","last_seen":"2026-06-19T00:56:00.234864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.818Z","timestamp":1781830519818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 03:05:23 GMT\r\nexpires: Fri, 18 Jun 2027 03:05:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 78596\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8559,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-21T08:18:49.625869Z","times_seen":249476,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.402Z","timestamp":1781830518402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@300;400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30070,"size_decoded":2608,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6fce742990a1ecf01431eebf06541d25","sha1":"cca53966852f0d5486e2b134dc01032f3e658bd8","sha256":"9d95d1586b80e36867fcc02a259a124fea267f62c2960cad88520cece45ea767","sha512":"0e42d3856e473c3ffd2dcda9fe1c1f39b58de1e34aee37de4c4a2ee72a875b250276629aa33b2c5e979137383387cd6ea5e120ea89f08cbc57bb8c3dcb507d91","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw1:6SqqY49t5qY4yf/qY45uOqY4VptqY46","tlshash":"73d21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:39:33.731039Z","last_seen":"2026-06-21T07:16:51.344372Z","times_seen":2219,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/circle-2.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.049Z","timestamp":1781830519049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/circle-2.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4792\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4792,"size_decoded":5057,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5f9c51f723773d2fdea2ee949a6157f1","sha1":"700b68660ad869fa30d3f20c02197d92ecc80091","sha256":"fad96ee8b9e99543d45f5a957dcbecd63c2931736b09f27662f7665dd97b000e","sha512":"8b370f66006509095ffac768d591243d677a57a742f9755d569fc448a677072886ffc62f218a1650d37de15f0073f73ddf52fe6921c52a9a75fe5d883fcae37a","ssdeep":"96:yjeCKQ+AxqgtcNVM6TIyZ3iDsJssYQRgP4tTHU8m8qG+:yjjBxFn6WDsJsspOQBH9+","tlshash":"67a1ae1023cc3c3911954e7b9411758a98750a04f7b94d8c0e4a761e877f28d7acbb3f","first_seen":"2024-08-19T17:11:42.48969Z","last_seen":"2026-06-19T00:56:00.236758Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/lity.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.331Z","timestamp":1781830518331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /lity.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 970\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4410,"size_decoded":1278,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"39e4e7d91a78805965db33bc658b0bb8","sha1":"69028223de64b023138ffdc5d215feb035321bfc","sha256":"6d79d838fff2cc09061750f0cada06c0173adc092c52381923eac2f9ee9ae80a","sha512":"988011e39f8e70002eb6b7c3789dbf940f541a4bae919f0c67fdbd3e5ce755e3f8db76c5b8b665f44c5e1a7d57ad208642ea6d36c7ae4312ba76567a0b837781","ssdeep":"48:fQOEHo3id8tAQBCCFC4C8R3Qlo3id8tcxmP6BCCFC4ChHzESOCQrJPtWidK9Hy9w:fsHjJi12jdx+i1KT9Qb7lkh6DkKQFVND","tlshash":"7191de6c4a001104613ac94c37d98b395b7d81a3af0305bffbde5b4ae3d7a5842a6f66","first_seen":"2023-08-04T18:08:32Z","last_seen":"2026-06-19T00:56:00.237414Z","times_seen":46,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/banner/manyline.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.865Z","timestamp":1781830518865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/banner/manyline.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25484\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25484,"size_decoded":25750,"mime_type":"image/png","magic":"PNG image data, 510 x 503, 8-bit/color RGBA, non-interlaced","md5":"5fd0c469cdaa849fff0f817ed2a798c0","sha1":"799493e50e6985107bb19402679f8e7ef0a3b4f0","sha256":"c6942f4ceadf66ebca42bb3e7b32f12532340e4ca3cb6755b7e5297db51f407d","sha512":"78417928b44915cf49307735a6b57290f1200210aa855053b312002688e9ff647c9354d4494786166f4b409ef5f215f4efcd7a3f90714e18d078466e68b9fe95","ssdeep":"768:AHldQPG4Xm+hutrtbiNHGBwYguj8TM78gJT8D:ASXm+hutR5MuHp8D","tlshash":"94b2d1a96bcf1c109f4702dae0172b1e7704740287a5dfde99f29b21e5250a590fb28b","first_seen":"2024-08-19T17:11:42.488828Z","last_seen":"2026-06-19T00:56:00.095198Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Saira:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.417Z","timestamp":1781830518417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Saira:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11961,"size_decoded":1306,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"334456e2b83a68edc0ed81b9a0334ed3","sha1":"0d418148bdabe5dc94ef83f4de7c1a635bddecbb","sha256":"b6a150fa9714582ad162888d2984e98637e917279b5041e9c52c95e93c9fc700","sha512":"986213a22b58ac11340cf0e162f24910944368960d3cbcd01b0d7d2e6a71700afba69dc5d2c513123a683476fd9170124b26ca00de1d6d6093fabb668516a7da","ssdeep":"192:cJNrNPcN9WcPZ99LPi9EuPn9zVPI9CgPd95fP29QSPb9PJPsi:cJhWfPyZszOd7","tlshash":"9632a890482a9044ea574cc623df7e72af8eb0257054d5797ffd2898aceec32632670d","first_seen":"2025-11-19T10:26:57.391763Z","last_seen":"2026-06-19T00:56:00.237968Z","times_seen":16,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/css/bootstrap.min.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.479Z","timestamp":1781830519479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-21T08:25:52.996938Z","times_seen":134946,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/workbg4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.699Z","timestamp":1781830519699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/workbg4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/style.css\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:34:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2690\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2690,"size_decoded":2955,"mime_type":"image/png","magic":"PNG image data, 130 x 145, 8-bit/color RGBA, non-interlaced","md5":"b31ca0b8b04bdcb87edfc687903a08af","sha1":"88e78b4e3282814e42ede64c299b320cec559472","sha256":"669021e53fe7f80f390e39af57dc2492900e5d7c8c552045744f3dfec5c3f3b3","sha512":"1b38f20d381e52d411e63d1e706825288a3e63c19696024da788ace4c39d9c723b81c83c2c4f50c44b00fce3c8e80e5fa8a96718abbf41115443c8234da0cff1","ssdeep":"","tlshash":"2f510c0ed5b063116005e43151e25637ca5188d04dc4e47bfbd9d0699e3c5f886fe9ef","first_seen":"2026-06-19T00:41:43.579955Z","last_seen":"2026-06-19T00:56:00.244004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.737Z","timestamp":1781830519737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 18:25:30 GMT\r\nexpires: Tue, 15 Jun 2027 18:25:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282589\r\nlast-modified: Mon, 15 Sep 2025 17:03:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15264,"size_decoded":16077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15264, version 1.0","md5":"21c1966f1535b75b772cd782f4bdce05","sha1":"df8c2865d1240e3eb3183d3f8fc97a047ec1a92c","sha256":"13626adc698ca3982595b130053d69e117d004c66a1449227597a86b6ac6e446","sha512":"9c94410c1c76b8fed70f9645a696f34a1298c14a62de11b34331b82a7b519096f4cf20229439c6aed35b697e7d0f4ee6fb9e78ba2bb7cea8761c1a3bdc0168a6","ssdeep":"384:uUXHu3IYTpYgOMJLD2/me3KLlixWBUL101DUgmBfbg:3MphOs2ue3KpKJeDGBfbg","tlshash":"9a62c1258e352dc6d74ec72b81b91c61c34455b3ca2ede2eda54b7085b3f0432a3681e","first_seen":"2025-04-24T04:57:47.892353Z","last_seen":"2026-06-21T05:36:26.723812Z","times_seen":1954,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.481Z","timestamp":1781830520481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:07:39 GMT\r\nexpires: Mon, 14 Jun 2027 10:07:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398862\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-21T07:40:52.00111Z","times_seen":49911,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/style-admin.css","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.333Z","timestamp":1781830518333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /style-admin.css HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Apr 2026 23:33:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9367\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55306,"size_decoded":9676,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"193f079129c6639ddc54c4e8b0cd2f37","sha1":"a8cfb5c75f80a5ba31ffaf21e71c0df3f26c2ebc","sha256":"8931f3991796e2665f533f63294e53064b89c537d8609d77523391e6659d894c","sha512":"df3d5eb5a58ac28f51b452a9d173297715922168024353af9d502b89c2770aa5b527944e389f0cf6760a2db3d8ff7445234b75e3c98eb88e1bc9dbdc03a969bd","ssdeep":"768:B3RXco/d9vBnDWYkOSILOrn0nhhThUquKWYd6mamkQw+JaXnX+h3:5IFsnG+n","tlshash":"aa43781c96451a06b137c9d4bbf257d5ab6d00239a0707bcbab1b170dbae0fd92b178c","first_seen":"2026-06-19T00:41:43.759713Z","last_seen":"2026-06-19T00:56:00.250511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/js/owl.carousel.js","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.459Z","timestamp":1781830518459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/js/owl.carousel.js HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 11 Apr 2026 23:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19568\r\ndate: Fri, 19 Jun 2026 00:55:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93440,"size_decoded":19806,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (360), with CRLF line terminators","md5":"c1a79ea184d48eac08037a68032ee093","sha1":"2be9bd99a52c926049f988a87a38f668f5e2e9d2","sha256":"93ab8ae2581efb90c20445709b7402e82bf74100b1446860305bb5d118917775","sha512":"a7ac0a94829f4d9868a49bdb76bf6863e44ff1e2941f40b4d316778058fae968d8bb7ba77d57f4b0abbbc027fc6afbc914666a76476091c3d6782ed12d370bf4","ssdeep":"1536:Z5u1MHUCBjloTO6JyqaiYhKPQ4ZarMMEpEa9wleUBj/DvRM3VX:Z5GUjloTO6JyViPZpMEpFalrBj/DvRMt","tlshash":"f393a2d5f31e262f4ab63320557e6309fa3dc525d10227ad78e8a5cc29a5448836effc","first_seen":"2023-03-07T01:06:40Z","last_seen":"2026-06-21T07:14:34.753259Z","times_seen":2465,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/cer-img.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.011Z","timestamp":1781830519011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/cer-img.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22296\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22296,"size_decoded":22562,"mime_type":"image/png","magic":"PNG image data, 235 x 330, 8-bit/color RGB, non-interlaced","md5":"2a63844713115406de3ee0c610e5255f","sha1":"eb91401c79d92d030b81efc2b2673b2b0fbfcb6d","sha256":"9644beb428057a895d3b0d5247919a0c397b2aa70cf71324fde50291dd75e79f","sha512":"5fa1b9b67bb9ff0163b7aeb0380813a66021c5d2f14b1318427c255285385b3720df241e30397c45db9b8aa9a4b9af51c0e7429e3953d3898359f2bac01be511","ssdeep":"384:nFBkJOgZiJ+NI0GDj99ud+fixMxlF8M7xEZ9HKNA1VbWMRAf4:nFBhT4QDbud+b8kEjMmKQ","tlshash":"2ca2d072fbda0087355b2f02b2414832d626c72792e3d4a890786a9fec9be43c1513ad","first_seen":"2026-06-19T00:41:43.856878Z","last_seen":"2026-06-19T00:56:00.257496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6102589cd6e7610a49ad8698/1fboik9l1","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.795Z","timestamp":1781830519795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /6102589cd6e7610a49ad8698/1fboik9l1 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://paxasfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\ncache-control: public, max-age=2592000, s-maxage=2592000\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 19 Jun 2026 00:55:19 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 864\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a0de914cc876569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":505,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bai+Jamjuree:wght@200;300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:18.406Z","timestamp":1781830518406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Bai+Jamjuree:wght@200;300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 19 Jun 2026 00:55:18 GMT\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9590,"size_decoded":1355,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cc2d8e175d4c0968586f67c5f8e6f140","sha1":"7d55df227548d97165232158be584807a39b06f7","sha256":"79e6f590748de658c9aee3a5eee6c610cb3ad21cfbf8c66628a9fad39e7df7c1","sha512":"b48d73586434f9846daabeb7626a2aba45230029a2d156136cd03bdf34bff85629da9ebc96b369f2263f4b99dfd051ebd62611911df3bcc0711e8b362457d347","ssdeep":"192:TUVIgsu222AIA9zEiOv6BSc1ouVBDqBaeoZKHSK2K3vK9:otttO2k7U","tlshash":"9e12f1900426e600aa8f1dc162cf7d3b9e1f61717451c63abffd089cadbad21539674e","first_seen":"2025-09-15T09:37:50.537304Z","last_seen":"2026-06-19T00:56:00.26056Z","times_seen":18,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/join/icon-6.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.054Z","timestamp":1781830519054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/join/icon-6.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1931\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1931,"size_decoded":2196,"mime_type":"image/png","magic":"PNG image data, 61 x 61, 8-bit/color RGBA, non-interlaced","md5":"13eb5a756c78f1048368cb2b4b8f7786","sha1":"19356ad91d5479cd0199d8f335f1beb12508a6d6","sha256":"8da34fdb45f0eab49d6c93131540343aa2a44f4fb9f8791cbf6cd9c086010d01","sha512":"2360f79fdfe149ab20b3d003d32a70946451f1519479dce367c78b35c434a064d4b1cb60d3642b13d372ffbbc226a0f0c0f49a4efb0cf24531bd177d76a6bde2","ssdeep":"","tlshash":"db413bc7bd779e58db4da2be0de01241f945c330cd1025d6714a15b0fed7d0a6000aee","first_seen":"2024-08-19T17:11:42.491741Z","last_seen":"2026-06-19T00:56:00.261205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paxasfinance.com/images/pay4.png","fqdn":"paxasfinance.com","domain":"paxasfinance.com","tld":"com"},"ip":{"addr":"185.244.151.84","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:19.247Z","timestamp":1781830519247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paxasfinance.com.spatialforex.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 19:27:00 GMT","end":"Wed, 09 Sep 2026 19:26:59 GMT"},"fingerprint":{"sha1":"71:CD:F0:88:C7:F2:88:4B:67:02:97:F4:8B:86:62:AB:A8:98:33:EA","sha256":"1F:7F:14:C9:8B:D1:25:CE:B0:CF:ED:12:FA:B0:D1:84:9D:97:AB:2D:A5:D5:AC:EE:8A:62:6F:AB:FF:A7:A4:98"}}},"request":{"raw":"GET /images/pay4.png HTTP/1.1\r\nHost: paxasfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nCookie: PHPSESSID=694fc317d3caabb64706fbc631e0815f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 26 Jun 2026 00:55:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 11 Apr 2026 23:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3762\r\ndate: Fri, 19 Jun 2026 00:55:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3762,"size_decoded":4027,"mime_type":"image/png","magic":"PNG image data, 73 x 76, 8-bit/color RGBA, non-interlaced","md5":"4c8a002ccc803eeda6ae66012d5ae4fd","sha1":"6c224a49e582b7695c28c92db22df86e175a6255","sha256":"851f56e09a798b66a361e251040455349d26358a3ad8672c79cbfc272ff952a3","sha512":"dedd53c11338af2d5775b71a12c7a9c60a19f04046734074b45fc766cfbf487d210bca2e73785aff6dd7ed3707d909f1330581b627130a6d7ebb5b3fd820dc57","ssdeep":"","tlshash":"f5715dd6f9606340e28ccac640da9b0f240561e0ca98d153b8df0d97a62a1b844bd08b","first_seen":"2026-06-19T00:41:43.718946Z","last_seen":"2026-06-19T00:56:00.262013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"paxasfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paxasfinance.com/","date":"2026-06-19T00:55:20.970Z","timestamp":1781830520970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paxasfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:30:49 GMT\r\nexpires: Fri, 18 Jun 2027 02:30:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 80671\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1412,"size_decoded":2071,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-21T08:17:21.76787Z","times_seen":11936,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
