{"report_id":"45ecb0ad-747b-41c4-9ef5-8edbb56f6eab","version":0,"status":"done","tags":[],"date":"2026-09-19T14:33:13Z","url":{"schema":"http","addr":"fixedfloat.payffhub.com/","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"title":"FixedFloat | Instant cryptocurrency exchange","dom":{"size":14927,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"58a3ff5369e49ecdee3b3f338b1ccfa4","sha1":"f671d3500027151f2ec3344cabb4661eb0863f86","sha256":"45ff77c2433186c851b2e66d94753b06d63083fe0ac5b3e39ea168156f451f88","sha512":"b1dff98f4d7960280699f914d9479a9cd572c78967cc32576ba7da8bee2d6a586bafd18f061f6a0a11ae26afec55ee99bbae266405cad4452b7d1d41a8ae9b32","ssdeep":"384:q67rtMpbIItYR5yKKDMnBLIqJ44mRn1VGAv:q+r+IItYRwpAT5mRn1b","tlshash":"3762ee2120f22037526341caa9662b2b3ec7f65bd90b5a5073fc4ee60fdbc52ec1755a","dom_hash":"domhash3b7f893b36e5bb12cb69d15e26e62388","first_seen":"2026-09-19T14:33:15.938101Z","last_seen":"2026-09-19T14:33:15.938101Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fixedfloat.payffhub.com/","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T14:33:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fixedfloat.payffhub.com","ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-30","domain_rank":0,"first_seen":"2026-09-19T14:30:08.263465Z","last_seen":"2026-09-19T14:30:08.263465Z","alert_count":87,"request_count":29,"received_data":1744948,"sent_data":15774,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/widget.js?v=ffnr6","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53ab22270c42e49be76f174fe8d13bb6","sha1":"22d6e63b0bbf14be9a3358f2d7ecf9252af39b5d","sha256":"0b120860a92119d907f9015d96b473b6661dbf7705a7b37db52723948e9b86e2","sha512":"04f87621b13917e34700e6f2a7294b95bf970b12050e128c0ab694641a3ecf3d29eb386b1b56ed82cd23392313b175ed707ca8fe33b0f7a28cfe0c8574f30091","ssdeep":"192:Q4Yp2m7PQQ0bB+FwnjEtfZhFj/PgR2E4OcX5ANnf6pmPwh/fYx26TA6ZNc/GnI83:Qb7ElVItFKkffwRTALttMXNgS4K1J","tlshash":"a472b59975a72075883b71fe86cf642534aa604b9447cc583dacc7403fc84699bbcbfa","size":16450,"data":"","first_seen":"2026-09-19T14:30:12.867928Z","last_seen":"2026-09-19T14:33:15.956101Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-300.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.228Z","timestamp":1789828364228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-300.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYuOC%2Bc2EOE5aXmg2i2MFVxth8x84oRCDAHuYalK9TAz8W1mZDORgzSlQB25kRXbteCQUuyjg8xCjv471moCy%2BD4iWUksu8UhNNqPevP2Tu%2FmYf2Tiny6luOLgYPILZf8q90RMHovhSXoQ%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2c6c591525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":784,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-19T19:52:28.511321Z","times_seen":47488,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/background/mainbg/theme_dark/ground.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.770Z","timestamp":1789828363770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/background/mainbg/theme_dark/ground.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMaYUBEjBMi5NDV%2BVUriFBESO2HE2MK2MtPUs%2F9%2B8qyeEZts%2BEH%2BIZYFe042snoCHXg3A7kb6NLHd3d%2BYVANHewHjVk5QlE6XWtBkjLxfSzcdzA9F%2BgnkLGWR8hp%2FoaSoIjm76vapOt9pw%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-54f\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d299bcd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1359,"size_decoded":1367,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a8229f0e61187c296866b50c1322fbc","sha1":"db03b7078765ba3d31a4318b1def7db384b5fec5","sha256":"f75db56b33f84a5323c1c1d3cf7ce0df80e8006a236e1b13af759b2e02dcf964","sha512":"442cc0e3cd2a191955e46b72b3511ad23471ab5abb80303210595d13a08c61ffe32e6444bcea8f3ef55b1cc59c62f0e6116d79eaf82aa97bd919cb7120f17226","ssdeep":"","tlshash":"bd2114d5e255e549590e8370feb8a6e1712b30c4d10922dc509e263ca00b7976d64d6c","first_seen":"2023-12-30T16:06:41Z","last_seen":"2026-09-19T14:33:15.940713Z","times_seen":38,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/api.php?action=wallets","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.907Z","timestamp":1789828363907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /api.php?action=wallets HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvEcloWc8u36AZkxe1hXtMrTNvMDNlTmZW4KRMZoWBMES8Wr5hnaRwWX9VeRxYYbMLRYJ5oPtRApozpMKEmyf7Bdwl2KV9wyWao8zIDxf6rjR58m7Ygwy%2BZmRiG4J7cDLh8fItQdqy%2BqXg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d2a6c0c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":703,"size_decoded":1151,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9626ce1a4e013608d55a275db8d2371d","sha1":"f6b3d19fa9503e973654670795ad76bd2b4de6b8","sha256":"282179399d57d2f94f927bd2b7c82da3deb79d443529f8052f3bcde19ee22aba","sha512":"61eb24b377a56243906386ad49062499020c030a434eaa6ad2d2ae3dd5c441b61beca160cb7ada1a5b95162c0fa5359304c02a575ebfd78a97c687aaaddc7911","ssdeep":"","tlshash":"0401440e52272d06143743a067ac5d2d39e7c39757690b3b8c012cd4002bf47af19572","first_seen":"2026-09-13T23:26:09.713978Z","last_seen":"2026-09-19T14:33:15.941546Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/background/mainbg/theme_light/ground.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.772Z","timestamp":1789828363772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/background/mainbg/theme_light/ground.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyeYtDLMGyaDjV620VX2e01BZ%2FcO71OIVZQ27gO1wJtTWWQAt5CuwmoewUGRmZiJVIXF4pNZ2EZqycpilk2gcSyQYPxwNN8OFXQBZJ4QzKd00hlPaqjNNjZVhRMheTglYvFYpeVP8YMRaQ%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-54f\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d299bcf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1359,"size_decoded":1352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7619922fa5063f11e3cf0193d3a29c8d","sha1":"e452987d237cdc1dec0f86353b8a2ed11a32ff2a","sha256":"9178e817fd443ac8e315cb3b9f667ab3663331a1e1ebcd3ba50d53785e33f2e6","sha512":"434e8f30c7348bb16c5311aa1bed1e567bfa26e895c08c6472683a1a1f2c04940f2668d3b4b2c4a5c816ff9d4ebee15a4c33efa1b4498120a8cdfa916cee17e1","ssdeep":"","tlshash":"282106d5f295a188590e43b0fff5f6d2711b30c9d14a238c60ee2678a02bbd36d64d6c","first_seen":"2024-12-27T05:30:25.728733Z","last_seen":"2026-09-19T14:33:15.942615Z","times_seen":35,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-regular.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.821Z","timestamp":1789828363821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-regular.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-31a4\"\r\naccept-ranges: bytes\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hm6ONhC%2Bl7IoCVM36uvnUvHjFcB7teSJTNHpk%2BrYVc%2BJjziPIrRU%2FZgSAX9KAkwub7JhB7FisnS3mNTWAuPKgoVyzJpDDOOBXaaVMbJOBt7wMvFgpvTMeJOWZRj%2F4u6foeZIsGciFTh%2BHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d29ebdf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12708,"size_decoded":13444,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12708, version 1.0","md5":"b4a68b1e743ee317eaaf0bbadd131571","sha1":"f24f7823d4e3830c7cfa5bcb33733d2897c00f13","sha256":"ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394","sha512":"b3bf2523c9cf0ed55365ff6f03375512d478239297a2af99b839f15d59e49094b03e085fca8918faa75b928fe1531376070018ea5fdb07c3e8743e6253a14ed7","ssdeep":"384:uvrIB27G1PF5LfsdGAu0lKtDvJL8REbg/qif0:sY27a8xovJg2SfM","tlshash":"dc42d0753492f402b159fef554ae6fb0f802d1da7b81bf574116d1a0461c8c789bee0e","first_seen":"2023-04-05T14:23:20Z","last_seen":"2026-09-19T14:33:15.944094Z","times_seen":8405,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-500.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.226Z","timestamp":1789828364226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-500.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-3214\"\r\naccept-ranges: bytes\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HzEmFy%2FRLOgZndYBINQitT%2B2%2Flw%2BXAUJr6c%2FvA%2F7EmCdgrsFBktdWYUHLS%2F%2BDrbKWB05RyO%2BwGFrC7oxm7jmHiX%2Bm8vi%2BosgmzgqzHqgiQYaWsxnXTw5x7YsDjb%2BNC%2BpHEmZl%2Bbxg8Ppw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2c6c581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12820,"size_decoded":13572,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12820, version 1.0","md5":"3f2f6d9e64a95a40ea5dedfc91f42a95","sha1":"9cd9f5a2f86f1d42390141d91619a0aa41a276b7","sha256":"ed121b1a8fbf30998a4ed0a7c8343abe9091ac4744f1c24b602b5d3f962bdb78","sha512":"faab3a6aa8d6b54ea32ce7dcae453d94121df43e1eaa3c8d779c579733bc021dc63aac8c6a6df6b8a00bc3622c2d960dc41bebc33500671f1b298d1c83ed3c08","ssdeep":"192:p50Kdp7/epn/5KwXolKf55TIbqhWYDsWOaWon/8w/IaGDQe2uxz8FbwV0ltzQkxZ:p50U0hXoEvI++AznkJQvuxQQutzH","tlshash":"2742d086f0703d1ac12d55d8b6b148d42bc73eea56ea0d248854e8cf39d60c4790cbbf","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-09-19T14:33:15.944741Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/api.php?action=estimates\u0026amount=0.1\u0026from=BTC\u0026to=USDTTRC\u0026tickerFrom=btc\u0026tickerTo=usdt\u0026networkFrom=btc\u0026networkTo=trx\u0026legacyFrom=btc\u0026legacyTo=usdttrc20","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.429Z","timestamp":1789828364429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /api.php?action=estimates\u0026amount=0.1\u0026from=BTC\u0026to=USDTTRC\u0026tickerFrom=btc\u0026tickerTo=usdt\u0026networkFrom=btc\u0026networkTo=trx\u0026legacyFrom=btc\u0026legacyTo=usdttrc20 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=30\r\nx-cn-quote: file\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPaEVyJQSEKG0RBNQ%2BLoea1nurUg2QCSPqD%2FUafc03u3TqdjETTzMT0TE2MPnx6wkipVZ0V4UvMkpxFMIWKC%2BaZu%2FdZZiM%2Bvh3Df1kXaVdurASm9MHtdN%2FgnDUM0te12YEnYFVGnBASDuw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d2dacb51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":786,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c478ce3a734c4f3457466fa60fb65ccc","sha1":"63d137d4080846a0424ac8da009e8ff214ff1e2e","sha256":"7599de864cb71ba5affa2799c99a3105c8774288e3e529f29ae00f80e5e1f491","sha512":"044cb6d1686b3a0a4c446d1157b225786bd9ae90161e81743af6c5593aa9ecb4cac903426406ca4e29aaf5b36a19d07fcf29995ef66e962a993bbc412563968c","ssdeep":"","tlshash":"88b01210325f4208e10020b6ec0f15764543402511386fd060f74c3354800008c05e38","first_seen":"2026-09-19T14:33:15.945388Z","last_seen":"2026-09-19T14:33:15.945388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/background/mainbg/theme_light/sky.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.767Z","timestamp":1789828363767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/background/mainbg/theme_light/sky.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvD0txlwYy2xqbHivc5VX6W9ts%2BonjuXjxH8PSU0urYcqQOqQckt2X2p69cnnBgY9NoNnul4Qny1QJa0gTfKcikXel%2F1BidU%2BznVE3dqoCgiBpuGZ2g6ysu1ki6yHOSakF8eIWegv7Ygtg%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-796\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d298bca1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1942,"size_decoded":1403,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1be4cc133aea01d77202ad0c92ef8378","sha1":"fb685a1a9c730f1969aac1f75bf3b310e005d92f","sha256":"ed28a7c4f42e5cbd669fe1abcca84ea0027a1be765aa5b93e39ab091fe19306d","sha512":"3b1ff750d613f08aefb5457928878bdf55451149097a5fdd72d9350d4b6b2d851ff0f338ce63a24c210dea423f1507bb589456abc9e47cfe26cc8bcfb3020f59","ssdeep":"","tlshash":"b64101a0d2fd655ea5150278fbfaa4d71016a0dfc512438ef4ae3674502bac3ed1e634","first_seen":"2024-12-27T05:30:25.71856Z","last_seen":"2026-09-19T14:33:15.946838Z","times_seen":35,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/robots/fill.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.773Z","timestamp":1789828363773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/robots/fill.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nh1A2%2BTcTIjto6YsAKAH%2B1RxQXmL%2FURsKGcXPX4HlOro0BRwJqN6KhYbFfnnTEYyM%2F%2FnQ91sbk4CkKLZj7JxS1bVaEZDliyjkVhlsdqvFR2QfYUh3VqsLDhz%2BZwOT19aba8%2FRegJE7%2FUuA%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:50 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5232-6a\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d299bd01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb656a2fcbde8766b340065de8008428","sha1":"45e51b676ccb901589e84448d58c22fe0e5f16b1","sha256":"5e78fdbcadf0ba918f0d412d3f3757efd23d11d0a296f226a4bf5144a4f7d96e","sha512":"bab0458d80724b74684c841dbc376d93642bceb3ed98e6e90d73383413fd51ff44052b14898661679ceed4a62345160277181d57b565a25ef640394b4c056e89","ssdeep":"","tlshash":"2eb012be914d5d08c408c83060bc7497146a91c695c804bdc9d02500f04d9d3381123d","first_seen":"2023-12-30T16:06:41Z","last_seen":"2026-09-19T14:33:15.947733Z","times_seen":79,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-600.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.225Z","timestamp":1789828364225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-600.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-319c\"\r\naccept-ranges: bytes\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXDwmidVu1YlftG%2BJxWrtBe83IN5rjwuBT9h4U7aPnP3QrR7YHwuY%2BlWMI%2FwS9rdMcIpJG6zlKK7B2XaxOD1QPzr43z4cj39nvG74d%2Fh4bcBWB7JGv8wx6SetVG4l%2Fh5LRcMsI8Cp18MdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2c6c571525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12700\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12700,"size_decoded":13434,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12700, version 1.0","md5":"e571167fbcce8d5081bce96a09930063","sha1":"e12420f5e4da3ccdc75a58ce744e7d5a0c6cf79e","sha256":"98be19bc78b5bc5d419e4fa6ea055ebd4671a963e2cc644aeed4362f15d14c31","sha512":"2a7e28d5e1cc8fcb4089f51a012ba801038c1e115102f68405c730f58b490f3c9fc352ba533e0bf062f965b5fb44239b1b8ba914863a72c68aeeb27101c31881","ssdeep":"192:9pyDYbbMYHexdHevLbDfo1HGQDo2hcNmchLzc83f55bA0hMMApntRt+BbzpsTOkg:9pWYHexWbDu5KcqjbMFovQTg","tlshash":"7342c07c8215e177b483a56c689724cc0881c73b7f80e059f71ac48a4f1798abc397f9","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-09-19T17:48:11.51202Z","times_seen":3325,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/ff-app.css?v=ffnr5","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.757Z","timestamp":1789828363757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /ff-app.css?v=ffnr5 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWEBE0WPesseUylKPG03eTV0BaPK%2Fhvtof25aPvqtkEO5oKLnS72gvdkAjNAjr0jKh9x82rMmKR8fekAZGyzYyHeIIcl9ljf4QJEwYtkMR0wVJp1JE444xe0yoqldUVoI9GGADp2c3sJnA%3D%3D\"}]}\r\nlast-modified: Thu, 17 Sep 2026 10:20:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aabbf01-2bb1\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d297bc31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11185,"size_decoded":4309,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"015c402accf3401096396ae88b24c429","sha1":"deceadc7c1efaea7fc0f5f8bf3b98974df6b59b7","sha256":"3371dc748461a41b0d63459d0d387f91cd863be5e4526dc885ab2d068dcd3206","sha512":"994f08dacb1ce7d50362ec6fa7cc8f79f496fa7880f704a6255b785bf4fde0ad96a27b1cbb36714e4844fc10a09186f87bde9ed0913d9ca5e8d79340957fe327","ssdeep":"192:/5nHsSIAzA+UK2MmRlGp6QO/4c4jVr1zHzhzFYz/K5:qAA+D65pqd15zSz/K5","tlshash":"4032c7c767aa0605701bc1747c675b86a36f6242d20ee6786bf5303ccfcc1d8a976b98","first_seen":"2026-09-19T14:30:12.844517Z","last_seen":"2026-09-19T14:33:15.949668Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/background/mainbg/theme_dark/space.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.766Z","timestamp":1789828363766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/background/mainbg/theme_dark/space.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4PBH9g96MyJwrY6OKWlS6OMzh7pM6Y77ZCe4ReQ7zlrsz%2BMLmb2lXXt%2FFgTaOc7qZCoE1w94G3HDoXmGJYdu%2BGUJkTYU6nkefKEmt8UvI6UY8rQdB0UB2AKvsoRAzjkzzH9zlvh%2FkobZg%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-12b5\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d298bc91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4789,"size_decoded":2248,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a8eca7310b779cd5e57fb7318e2fa9f","sha1":"4606c4ba866b1b6a2895bd1b9d507be9be4c4f0b","sha256":"0ebb50e016b4f46814dbcaa502e326093fb7030e7649f67141a6dc434ecbb859","sha512":"3667624f174e33b067a3b57c3abdd06701b9d75d18565d8c6df8cf9f660041530173889a03dcb2d322dc0a0db25a8f5bfce8e5e163ba70dbece5426c73687ee4","ssdeep":"96:cOOwOu2loDCmW1fWNt3FtVdwMRSNFSfGJ:AlEQWzVOMcJ","tlshash":"4ea1ffa0907cfdad9a05c5bcebabb4a6701f2065c753939cd2983c7687a55f37808374","first_seen":"2023-12-30T16:06:41Z","last_seen":"2026-09-19T14:33:15.950951Z","times_seen":87,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-regular.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.222Z","timestamp":1789828364222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-regular.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-31a4\"\r\naccept-ranges: bytes\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXJe4LzZ7lOUB%2Bcu6yjLuSFvyE3FYtsHNZ5psbJNvsCFj66laNxapdq2LeNRqhMcUY0SW%2FgV8itbHTfvCWkJLijJEXOeE%2BSug5Lo7WsD2EM8y4YW0tsV3GurtjoKlkepNDyhcMDBoT3Xcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2c6c561525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12708,"size_decoded":13438,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12708, version 1.0","md5":"b4a68b1e743ee317eaaf0bbadd131571","sha1":"f24f7823d4e3830c7cfa5bcb33733d2897c00f13","sha256":"ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394","sha512":"b3bf2523c9cf0ed55365ff6f03375512d478239297a2af99b839f15d59e49094b03e085fca8918faa75b928fe1531376070018ea5fdb07c3e8743e6253a14ed7","ssdeep":"384:uvrIB27G1PF5LfsdGAu0lKtDvJL8REbg/qif0:sY27a8xovJg2SfM","tlshash":"dc42d0753492f402b159fef554ae6fb0f802d1da7b81bf574116d1a0461c8c789bee0e","first_seen":"2023-04-05T14:23:20Z","last_seen":"2026-09-19T14:33:15.944094Z","times_seen":8405,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-700.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.230Z","timestamp":1789828364230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-700.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-3230\"\r\naccept-ranges: bytes\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvTLKWXCQHGLwjJtTGZHqu5UdrIP1QPMJoXku7EgcoZQCyGyPxTRpq6kfrbs2x%2BD2XhADcyXBX9gDJce8Iv4%2FFJphThCzdKp3NJi2lqkt4JrNUFPhMapdhIYs%2Bd23ntJvBJsi1d%2BY29SAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2c7c5b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12848,"size_decoded":13580,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12848, version 1.0","md5":"f0b3206d02a2f684530117ce1d7e8ce0","sha1":"f3708b707b65e241b0f1c819d5f7bf7da8412653","sha256":"f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da","sha512":"319019c97a520d9d0fac5487d614c41b7c766bde2a60724966054b232427490817ff46e9f6ac82165343d50732c02e7f4821f4074908fe58775e3cefe6812026","ssdeep":"384:7s2w3jKnPxyyqn2JKL8i3pAGQF7Zximd9qjAECMfd2J:I2wjGQ9n2s8i5TiZbdYtCcd2","tlshash":"6342b0fd32582df09d56a7bff79794d75774915d888038d56dd0894c0bac278021cf4a","first_seen":"2023-04-08T01:23:46Z","last_seen":"2026-09-19T14:33:15.952625Z","times_seen":5655,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/api.php?action=ranges\u0026amount=0.1\u0026from=BTC\u0026to=USDTTRC\u0026tickerFrom=btc\u0026tickerTo=usdt\u0026networkFrom=btc\u0026networkTo=trx\u0026legacyFrom=btc\u0026legacyTo=usdttrc20","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.431Z","timestamp":1789828364431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /api.php?action=ranges\u0026amount=0.1\u0026from=BTC\u0026to=USDTTRC\u0026tickerFrom=btc\u0026tickerTo=usdt\u0026networkFrom=btc\u0026networkTo=trx\u0026legacyFrom=btc\u0026legacyTo=usdttrc20 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nx-cn-range: live\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3luwdmpKpUM%2BNynh5CnWtf7ssGOah2prU%2FjhqYA4Qki5y2zadL9hlf4WfAUdH24GPZb%2FgPFdE3aC3bVvtV0am1Thw%2Bo1V%2Brl2RxaPr3znx1xDLkGVK2vO7SKQLH7vH0pMtC%2FWKOzoa%2B8%2BA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d2dbcb61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":709,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"836db1410a2767a9e0f351f939846f01","sha1":"96edd12268eca33f5ecff89a7c2da00786e1983c","sha256":"41e80ea454c2f25fabc8a110773ae720acc9550ce6b7d6ba0ed032a49a4a3869","sha512":"96607df7c24c657dc003bdc915aa86719f754376bdbeb77d326f27068cae153e6794851bf545056413cdab65b854072d3dd301389cea1806e39c596a88df79ab","ssdeep":"","tlshash":"dd800080802c0a802008b0802e2028080a8c282b0083a8ac00028e0002a80f0a0a080a","first_seen":"2026-09-19T14:33:15.95327Z","last_seen":"2026-09-19T14:33:15.95327Z","times_seen":1,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T14:32:43.453Z","timestamp":1789828363453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 17 Sep 2026 10:20:48 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5V%2FlW%2Ft97f9%2BU%2Bb8Bnorxoaw35WJ98ifnQQKaBy751h8%2FZCRRiy7PtRJbmpSHCoKXqu0SaOYl4u8qi91Gw28j169lSeLBehYOuDCtHK%2ByjoOvhwVgYkKxe%2BCIzLe3ye2HLJfhWXG%2FOB4Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d27cb2f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14839,"size_decoded":4430,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d1a20272ec0403db65720b1c0a664e42","sha1":"49746fec09f696993311c6258f5c8685b0f61e1e","sha256":"d212a7202117916e49317b27904aa061bb2281c72e10fe62f987c43f659757e2","sha512":"b33fdcea0d65a664efccb64c09587d7fdd31d8713d706c4f2c3dc855635d707d78d51793bab5ee1cc501ae8384ca9dff0f370e68ddfe16080b825d2be7bf911e","ssdeep":"384:I67rtMpbII7YkUyKbB1PBLNVU4mRn1VRA0:I+r+II7Yk1CrvmRn1F","tlshash":"5d62dd2110f22037526341caa9662b2b3ec7f69bd90b5a5073fc4ee64fdbc52ec0755a","first_seen":"2026-09-19T14:30:12.866626Z","last_seen":"2026-09-19T14:33:15.955005Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":11,"connect":17,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/widget.js?v=ffnr6","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.759Z","timestamp":1789828363759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /widget.js?v=ffnr6 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BOA%2Fpo7pNfYmJ6kAGRoROHBkmm1mZpVs2OI7tLZhM1MaqCPa1USmiUaXdvL2br3JoxpXkMy6IVP6oPsvyft0Fxmynfz0lvmgvwvO%2FD7xbFWCQGTqzWXvv7j2ulnZssbPvImxo29yXd%2B5g%3D%3D\"}]}\r\nlast-modified: Thu, 17 Sep 2026 10:21:32 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aabbf2c-4042\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d297bc41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16450,"size_decoded":5669,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"53ab22270c42e49be76f174fe8d13bb6","sha1":"22d6e63b0bbf14be9a3358f2d7ecf9252af39b5d","sha256":"0b120860a92119d907f9015d96b473b6661dbf7705a7b37db52723948e9b86e2","sha512":"04f87621b13917e34700e6f2a7294b95bf970b12050e128c0ab694641a3ecf3d29eb386b1b56ed82cd23392313b175ed707ca8fe33b0f7a28cfe0c8574f30091","ssdeep":"192:Q4Yp2m7PQQ0bB+FwnjEtfZhFj/PgR2E4OcX5ANnf6pmPwh/fYx26TA6ZNc/GnI83:Qb7ElVItFKkffwRTALttMXNgS4K1J","tlshash":"a472b59975a72075883b71fe86cf642534aa604b9447cc583dacc7403fc84699bbcbfa","first_seen":"2026-09-19T14:30:12.867928Z","last_seen":"2026-09-19T14:33:15.956101Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/fficons/fficons.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.860Z","timestamp":1789828363860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/fficons/fficons.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-7d18\"\r\naccept-ranges: bytes\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtw7xrE0KCZDaspv2SLWvb0iAjo98EoKp7MRIywOcTSICBf%2FGCBt56WVIIlFEmJqg0jVpCICXssdlfTNFJuGyz9FR7ox%2FBziaEOSc4kBaukt9WkhDXgDDzLOsNq9u0aWPoNqn%2BZj5IdWBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2a2bf21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32024,"size_decoded":32754,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 32024, version 0.0","md5":"b97c091160d298cd06a8ce527e320712","sha1":"fd0f9e344ad5c843b3e5d2d68e0b9f4d1c86878c","sha256":"aca1418f67d0f757ca633a6e757e587192dd409d995ae86092a16a2178555f00","sha512":"95f4dbd1fc3bcae60b7da95216d211af58374c9ba55265f0edab4b8f059dec2ccb4dd02d581e525f2996cd18d1e1fd263143b4174275925de37b8d94417ac639","ssdeep":"768:cLlr4cWa5NDiLsOA8DHIj9zrjta74+IYiaGK2Ab80:Glr4cWIasOA8zYzr4rISfjj","tlshash":"47e2f16844a10a5de762a8f9e6f4da9501e9e1171fda428818c6ffacf33411036d3efd","first_seen":"2026-09-07T22:41:30.654395Z","last_seen":"2026-09-19T14:33:15.957327Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-700.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.865Z","timestamp":1789828363865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-700.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-3230\"\r\naccept-ranges: bytes\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLJPiofi4tdyrVrxxo%2FOIKaUJpYMUuPecuEV1NVpqF5d2LZ8iJPHznpvQKS4r0jNuX%2FO5SsShAWkFCPY0qVHBL%2FojSfqK8GryWkhkEK5xYqGL6qWYuJyE9sI22ov3TKvGx6IlJUrn03r%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2a2bf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12848,"size_decoded":13580,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12848, version 1.0","md5":"f0b3206d02a2f684530117ce1d7e8ce0","sha1":"f3708b707b65e241b0f1c819d5f7bf7da8412653","sha256":"f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da","sha512":"319019c97a520d9d0fac5487d614c41b7c766bde2a60724966054b232427490817ff46e9f6ac82165343d50732c02e7f4821f4074908fe58775e3cefe6812026","ssdeep":"384:7s2w3jKnPxyyqn2JKL8i3pAGQF7Zximd9qjAECMfd2J:I2wjGQ9n2s8i5TiZbdYtCcd2","tlshash":"6342b0fd32582df09d56a7bff79794d75774915d888038d56dd0894c0bac278021cf4a","first_seen":"2023-04-08T01:23:46Z","last_seen":"2026-09-19T14:33:15.952625Z","times_seen":5655,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/api.php?action=estimates\u0026amount=0.1\u0026from=BTC\u0026to=USDTTRC\u0026tickerFrom=btc\u0026tickerTo=usdt\u0026networkFrom=btc\u0026networkTo=trx\u0026legacyFrom=btc\u0026legacyTo=usdttrc20","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.910Z","timestamp":1789828363910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /api.php?action=estimates\u0026amount=0.1\u0026from=BTC\u0026to=USDTTRC\u0026tickerFrom=btc\u0026tickerTo=usdt\u0026networkFrom=btc\u0026networkTo=trx\u0026legacyFrom=btc\u0026legacyTo=usdttrc20 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nx-cn-quote: live\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxxbNArtQkpJBW45akqfXzA%2FbhxXS4%2BKWxTgGyDG5LXdxg%2BibtCtHPp9gQAAonN3JWusfbFyPuX8zPEhJgZC85ZUWQkAbG3XE12ikNKDMaRw9eAOOn5jOBK997axq9ZbmHZ2Uxm5Rjiw2Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d2a7c0e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":745,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c478ce3a734c4f3457466fa60fb65ccc","sha1":"63d137d4080846a0424ac8da009e8ff214ff1e2e","sha256":"7599de864cb71ba5affa2799c99a3105c8774288e3e529f29ae00f80e5e1f491","sha512":"044cb6d1686b3a0a4c446d1157b225786bd9ae90161e81743af6c5593aa9ecb4cac903426406ca4e29aaf5b36a19d07fcf29995ef66e962a993bbc412563968c","ssdeep":"","tlshash":"88b01210325f4208e10020b6ec0f15764543402511386fd060f74c3354800008c05e38","first_seen":"2026-09-19T14:33:15.945388Z","last_seen":"2026-09-19T14:33:15.945388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/favicon/favicon.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:44.092Z","timestamp":1789828364092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/favicon/favicon.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:44 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKAWKFB4F8VVkYGxmTPXUv%2BMWxQNYM13G6MHWTx1WR7aofBv2%2FBgL4KsL9GPLe%2FQ5IqcYw5EmvmhliHVr0YBMGTVew6%2Fcs3rmS4YIRGbFVDfLsEo5jp9VsY7ldP4Bh6AhjWcBnpBQHI9Gg%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-340\"\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d2b9c3a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":1149,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cbc151ddf730eec3ab12483d780f5e3","sha1":"797833e4ac4c1898b85cd92764c9d6cdcdc5801e","sha256":"0133d2359fad12e40cffef591500dcaf60feda3703fd7ef418be6b44ae832632","sha512":"ee3bbdc0eba926a827de7b3ca4accaa4e4e95c6f7b8df77709e5cae4092cd6dfbcc13f64ad2a1b67b52bdfa9b0ad7a8bc4361d03d3e770bffc53bcf9be72ce23","ssdeep":"","tlshash":"5b0159e6c350c9ad2403d1c5cd386976377e78d8390a33d521bba233212b6e8e1151e8","first_seen":"2026-03-09T02:37:28.970713Z","last_seen":"2026-09-19T14:33:15.9588Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.754Z","timestamp":1789828363754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/css/min.css?v=ffnr2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYhL1cMPx5XU5Nhd0H0g9h6QP7Hn7d4zM6zI%2BAXqnde2rBlfoSxBfKhie8B1zF6vc4Qo5ZlFQPM6N8YNUcn%2BQ8LeoYPV1FSHzZZAHfZMKcSQEVAbLZeeO4ler%2FCw9r05eSSD%2BLbFYEBXyA%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:48 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5230-9b41f\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d297bc11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635935,"size_decoded":138880,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8e3a093194fa4137b9dee90e2e08e72d","sha1":"9541fa9c5323c4b31b9a60744391dd57774e2e0f","sha256":"e1b844f18d5f012692e2db15ef1a84198bad6ecce863eb285275c24c2d6fb7a6","sha512":"819b8ab81d7e4b69d1cee0522829ccfb6d4e3f93f3a7f16bdbbe367883c81be24df3d42a611ff48ee60e9361fa000ab3ea94f8efc7ed582bad701e232634671f","ssdeep":"12288:kUuWoKipFuAMFjPEO7ngP0kTmghoKtTItY:JoKipFuAMFjPEO7no0kTmghoKtTItY","tlshash":"78d41b70b75172bef8dac6fbde40e819200cd6ecec774309caad4319c79266694196bc","first_seen":"2026-09-13T23:26:09.728317Z","last_seen":"2026-09-19T14:33:15.96018Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/background/mainbg/theme_light/planets_summer.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.769Z","timestamp":1789828363769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/background/mainbg/theme_light/planets_summer.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDyi%2Fl63WrgMvHtDPznMhHhsz%2BRbXE1jhAnN3sI6nWoFHINQoWJ4BLWYUYxn7gqvFmBfebTAAYYTKYmtkbNF0V0W4j%2F2jpm7EUOpFbbL5%2FYY4VQasrjZnqugw5NQE6LSCUx0BXRLHSRoiQ%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-10891\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d298bcc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67729,"size_decoded":17272,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3d8f3f20d47b90e72b6e3f23dbbf59f","sha1":"1bae6d207a8fbb9058c8d83500fe1326ac812b7b","sha256":"267f47fca2ef1648188f8a447dfb9e4162fedd62b40d2d5406280a4e72b78ede","sha512":"e1a4f9b7e2310a7188e5cad15b209fbbdee1bb4d3667ca0784f852688baaeb89f28f2d600fd4186a03a621a28fe3d21e0fb82356bf31d92f49863cd05c6b57fc","ssdeep":"768:X1EYOTvoLCXNa5tf8mqOzjjaJe2bUBD5F7F94/LoHqLgDS:lLZ/eRUBD514/LoHqLgDS","tlshash":"9763c6ede75c6572da4483bcdb0790b1610f61efaa40839c90759f7db2625cb684caf0","first_seen":"2025-06-25T04:43:28.757201Z","last_seen":"2026-09-19T14:33:15.961267Z","times_seen":32,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-600.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.862Z","timestamp":1789828363862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-600.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-319c\"\r\naccept-ranges: bytes\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtD5Vb5CAHJtiaNO%2F%2FBlF54bmm75lBPhSO8cejntwD7FK1vstKCIHy10rOHWmeqIPZLFBYiezHU7Khh89g5Hw4jfXbYib%2FI2SRdwX0TA0ciR67IAUZdxPgA59f8zmokNsZ083zYZ%2Fh3HEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2a2bf41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12700\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12700,"size_decoded":13432,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12700, version 1.0","md5":"e571167fbcce8d5081bce96a09930063","sha1":"e12420f5e4da3ccdc75a58ce744e7d5a0c6cf79e","sha256":"98be19bc78b5bc5d419e4fa6ea055ebd4671a963e2cc644aeed4362f15d14c31","sha512":"2a7e28d5e1cc8fcb4089f51a012ba801038c1e115102f68405c730f58b490f3c9fc352ba533e0bf062f965b5fb44239b1b8ba914863a72c68aeeb27101c31881","ssdeep":"192:9pyDYbbMYHexdHevLbDfo1HGQDo2hcNmchLzc83f55bA0hMMApntRt+BbzpsTOkg:9pWYHexWbDu5KcqjbMFovQTg","tlshash":"7342c07c8215e177b483a56c689724cc0881c73b7f80e059f71ac48a4f1798abc397f9","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-09-19T17:48:11.51202Z","times_seen":3325,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/api.php?action=currencies","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.909Z","timestamp":1789828363909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /api.php?action=currencies HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nx-ff-currencies: lite\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tI%2BGVPs5khS1JlkLVfVryh0BJy7m%2B1alst8fkTsxKeM1aCbSvxcrI52mQnYcxZVJIi1qGZnNReluG9o6e3237ycjPIlUmuh9QplSTJJNE4dxv1sjw02NQw7PCbyC8Gwpc6YMXijCDnsO6A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d2a6c0b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1359,"size_decoded":1049,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a71801a1029178508a3282365dc5c596","sha1":"8b4c345c87504b544beadb1b850b9f103db14188","sha256":"f677020eb5e4674be888184fd4c4ebc7a44cb15df0689285eb1d0c57eb17ec3b","sha512":"acc15c35e73f04cd854681d48a7ff7b3638610121a3dc4db49ec284acddd87d62be627fde688380ffcb7d4c7413f5d3d928b17e622a61ee32ad09eb68000d001","ssdeep":"","tlshash":"0c2148bf3d741cbd872200fa204b336a79ac88a1176e54dfcc16ab5d03adb38909e560","first_seen":"2026-09-19T14:30:12.854821Z","last_seen":"2026-09-19T14:33:15.961924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/css/svgimgs.min.css?v=ffnr2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.756Z","timestamp":1789828363756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/css/svgimgs.min.css?v=ffnr2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPKlziiQHv8wznuACvXSptezcvxkpOirAa5mkEdTD0YlGSHbhvs72ZVkLENMOJu%2ByPCQvTts0Y%2F7EU3MXHXvPVDWFzXGKydkRwH7RtepUbpgUhC2WCS3CaaPMG5UPEyLsVDQp3oxBZqFdg%3D%3D\"}]}\r\nlast-modified: Tue, 01 Sep 2026 12:00:20 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a96be54-a6643\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d297bc21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":681539,"size_decoded":150925,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"52375fc39c763870bd9475fe1e147545","sha1":"807d37e1e47cb59ca160ab9a27be81bb05ed3c98","sha256":"ac4d928e46a52cf6d89110a20df70c4278a21c6ccf2ad22bbd3d8c30118387df","sha512":"742b77a7390a43ae1aa03d3d33a4cdd578c5ad42e2f0b698ef0d6729457dd9cadab11ca34beba96204d5a3279deeccab86244c8c70e4b57341041ee3ee083a7c","ssdeep":"3072:qQTiNaVaBd+zRZJQxa7v3lISR9IZqZz/N4l4jjeQFeQOeQHeQ0ZhBJg4lT2q+Iht:yinlImr1Ej58NJZ09Fc+vZQyQwW","tlshash":"e5e48178a350c3f89c86cbbede3654b1a50fa1ed91d6d35986b9c33072921d9e24c4bc","first_seen":"2026-09-07T22:41:30.662589Z","last_seen":"2026-09-19T14:33:15.96278Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/images/background/mainbg/theme_dark/planets.svg","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.768Z","timestamp":1789828363768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/images/background/mainbg/theme_dark/planets.svg HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSbkbuv%2FKpcfAFWSbXS%2FyrnZDbDZGy8IVxCFgqTGMUzgzDKkt2XzyZsf5gd%2B6tlh4eVGvtXD6HUP%2FF26SZH0M5KTjxBXPwcytICr1FyvrL5O4j5OOz8AEbqAJoYFpV%2B9%2FfFUbhNeK6AgGw%3D%3D\"}]}\r\nlast-modified: Fri, 14 Aug 2026 17:36:49 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a7f5231-2493f\"\r\nage: 195\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3d94d298bcb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149823,"size_decoded":26138,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35e91f075bee749b6997ff0d876712d9","sha1":"5f6eb672e1bcb583e97e35367d4be1f6527f3af5","sha256":"3d08e519d5801475fb278f3415c0ed707dd4c58d88f1e15f2271d6d00f7f9616","sha512":"203167afa79205883bc8333ce779a4445123f129a831fcf63f4c3ca88808d31af053f556671bf0ba85a1bafc57c34a08d5705be5e24fc73fc95e220169326564","ssdeep":"768:qE0hvGobTr3Y3BVHTAS0hqmQ+bvUis+EuX3ChCEC4zBjqJCVIOAv9EeF/DQQME5v:GbdbqG7psLHtemIO09lFrQQMOWa3Ie","tlshash":"d6e376b5e67d7837e61983bcff91d4a6300e60eec581836de06e673a1029ac35d0db64","first_seen":"2025-01-06T09:18:53.383987Z","last_seen":"2026-09-19T14:33:15.964432Z","times_seen":81,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-500.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.863Z","timestamp":1789828363863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-500.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Sep 2026 11:59:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6a96be17-3214\"\r\naccept-ranges: bytes\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSkBNnBwDQfxLc%2FRAo8ZQ7O6XGiuOAoeZq3hoLIOa3qMRSqrPZOnQID53CWcnDwxP9Z0sYwgR2YSoTa5dlmDiDjK7O6HVJciYClUPGmQIEyUG5%2BC3lh0puGm5e2jXpyV5%2FH5OVajYoV3nA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2a2bf51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12820,"size_decoded":13550,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12820, version 1.0","md5":"3f2f6d9e64a95a40ea5dedfc91f42a95","sha1":"9cd9f5a2f86f1d42390141d91619a0aa41a276b7","sha256":"ed121b1a8fbf30998a4ed0a7c8343abe9091ac4744f1c24b602b5d3f962bdb78","sha512":"faab3a6aa8d6b54ea32ce7dcae453d94121df43e1eaa3c8d779c579733bc021dc63aac8c6a6df6b8a00bc3622c2d960dc41bebc33500671f1b298d1c83ed3c08","ssdeep":"192:p50Kdp7/epn/5KwXolKf55TIbqhWYDsWOaWon/8w/IaGDQe2uxz8FbwV0ltzQkxZ:p50U0hXoEvI++AznkJQvuxQQutzH","tlshash":"2742d086f0703d1ac12d55d8b6b148d42bc73eea56ea0d248854e8cf39d60c4790cbbf","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-09-19T14:33:15.944741Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedfloat.payffhub.com/assets/fonts/montserrat/latin/montserrat-v25-latin-300.woff2","fqdn":"fixedfloat.payffhub.com","domain":"payffhub.com","tld":"com"},"ip":{"addr":"104.21.73.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fixedfloat.payffhub.com/","date":"2026-09-19T14:32:43.864Z","timestamp":1789828363864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"payffhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 11:27:29 GMT","end":"Sat, 28 Nov 2026 12:26:11 GMT"},"fingerprint":{"sha1":"E3:CD:59:FA:DA:2A:08:F4:08:43:3C:5B:9E:08:4C:A5:CD:01:4A:05","sha256":"00:70:A0:D1:88:B2:D9:07:FF:F7:4C:87:E6:1A:13:7C:AF:2F:CA:39:57:DD:73:69:FF:2A:C7:9D:57:9D:68:53"}}},"request":{"raw":"GET /assets/fonts/montserrat/latin/montserrat-v25-latin-300.woff2 HTTP/1.1\r\nHost: fixedfloat.payffhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fixedfloat.payffhub.com/assets/css/min.css?v=ffnr2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 14:32:43 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CP9cqEYHca5QGU7Ub9oPj9jSMcneDYvXUinPyJH%2Fo21vY6sZ8ky0EYnXqQO8VYefWziWGiOtY0QPD2a5HVEqU8%2FKjh3M%2BvCXxOQFCZJe9F8f47jKdiMiLmMf%2BhRDDb07TCGnmC1lAxaOrA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d94d2a2bf61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":782,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-19T19:52:28.511321Z","times_seen":47488,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"fixedfloat.payffhub.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"fixedfloat.payffhub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}