{"report_id":"5266b24e-bd82-4dd4-85d7-053519fc52d3","version":0,"status":"done","tags":[],"date":"2026-09-25T05:44:10Z","url":{"schema":"http","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"172.67.138.42","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"title":"RedotPay: The Ultimate Crypto Card for Secure Crypto Payment","dom":{"size":86385,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (517)","md5":"1299c337ffcf2ee584ddac59c669b052","sha1":"93527f63744285bed9d205bd112adae27ae6fccc","sha256":"57e256223db53467eb2da76c0e5281d7b355d19d39999d8f8801e0952073cf7d","sha512":"e88e10ed8712bc9deb5512b03622a9942eae24bf9a527afa3dfbcd078aa81933b403fe54cf67fe74f1c191f02d3414d822e319b16d321d3f068ce587b4039473","ssdeep":"768:kIbvIP+Mf5atlf1lXlgNAp3i5O6NwP+vCu+T7yN4rSdJzexbmt5lWG6zbpnRYF5f:kIo+2ApEO6iP+vR+TrSdJz4bRnRs5f","tlshash":"3383a75052f25473059381c26ab19a2baf90e10bcb4b594936fd0fddafd7ca6cc6364c","dom_hash":"domhashd4ca7ce3b757fb6bd8e4052deccd1333","first_seen":"2026-09-25T05:44:41.671527Z","last_seen":"2026-09-25T05:44:41.671527Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"172.67.138.42","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:44:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":5,"received_data":2293011,"sent_data":2398,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"firebaseinstallations.googleapis.com","ip":{"addr":"172.217.119.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3774,"first_seen":"2019-04-15T04:11:07Z","last_seen":"2026-09-24T02:17:56.130693Z","alert_count":0,"request_count":2,"received_data":1643,"sent_data":1594,"comment":"","tags":null,"fingerprints":null},{"fqdn":"redotpay.st","ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":240,"request_count":120,"received_data":2971503,"sent_data":148370,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"firebase.googleapis.com","ip":{"addr":"172.217.119.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":21765,"first_seen":"2018-10-19T09:09:59Z","last_seen":"2026-09-18T13:25:40.401202Z","alert_count":0,"request_count":2,"received_data":1262,"sent_data":1224,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-20T23:01:40.450976Z","alert_count":0,"request_count":3,"received_data":4084,"sent_data":3659,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-21T00:02:17.3583Z","alert_count":0,"request_count":1,"received_data":613,"sent_data":1606,"comment":"","tags":null,"fingerprints":null},{"fqdn":"visitor.leadsourcing.co","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2021-02-17","domain_rank":5313249,"first_seen":"2025-04-24T01:20:31.552522Z","last_seen":"2026-09-09T19:29:47.814266Z","alert_count":0,"request_count":1,"received_data":423,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1245bbd0b6b5b1f55a3b6308374df6b7","sha1":"e55a2e1fe69088c125ae32397345ccfa47d35a53","sha256":"6b91d2a770fd03d643f022cb273cbbd5dce9e8bcd2d1dd7de9b1b773909d2ba5","sha512":"687e0e8890d0ba5da8505b63979abba4e062e2add1bd66afbbbfaab5b31003864454fc1fd129b5be4f5ad4afc7e5f0204d1cb2d7e1cde46fda21e9074ab301d4","ssdeep":"","tlshash":"d6f0238d3c52f05b37f93934c223876f33a2070030c39534c605cc243824586184accd","size":444,"data":"","first_seen":"2026-09-25T05:44:41.863082Z","last_seen":"2026-09-25T05:44:42.670053Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"467ff5cca64f2e23ebceb12c142b2a6f","sha1":"a5e5a750553f16dbfc7ca47b70233d4071479181","sha256":"d11d48628ad88a731a1fcb0c5b57818721589cc09c55264db3dbd7a04d9c11fc","sha512":"a11fdd7239f7be1bbb2484305261cd99ea00ed88e88a1c40f0fbc79bab9a6da9ca6d1c1e342176919e5f58702af6c99d8d47df310a108dcf28d4855976daae76","ssdeep":"","tlshash":"23c02bc8310b0cb142e72701cb3fb600b0013204d8e05d31080a2344cd20e03db5c850","size":151,"data":"","first_seen":"2026-09-25T05:44:41.864404Z","last_seen":"2026-09-25T05:44:42.670702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"200a162241a141263894c9c6d54a716b","sha1":"c989f2bbba6d4ee94f205aa1924beff124dc9f88","sha256":"f83c5402d3c582b81266e2260ed4df28d1706853b5c7cee857a98cc45b724a9c","sha512":"6eb88331086cac00f9d61a0b52855898985fc6f191294a4aeb33e45eb0580c98ca47603008037c3135c486fbdf56bfb838543fef17c4a36d62777ae58ff62a24","ssdeep":"","tlshash":"dca012c02450c0d6e0799f0f8a100881033411c18350030680410b188108453c4146dd","size":80,"data":"","first_seen":"2026-09-25T05:44:41.865325Z","last_seen":"2026-09-25T05:44:42.671374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e069b882818fda11085784d0b3a40bde","sha1":"26fb06c2a592a65f1ce42987cd1f848367295102","sha256":"e2a5dde7deb5a5f92b857ce98a089658d9965ea61c2ad5dc5ca812738f96af9b","sha512":"be84169f9adf2000fc3d73ded26a774248e5846383eac7c166c213e0ba1e978476b5c58875b6b755eb2bf22e280a4e9dcc25f45a66295cf984bb56961606263c","ssdeep":"","tlshash":"c1c02b8c311e0cb251e727008b3fb704b501322494f06a32880e63084d20e03d784810","size":149,"data":"","first_seen":"2026-09-25T05:44:41.866552Z","last_seen":"2026-09-25T05:44:42.672118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe0fb51aed9d30e1446cc55213b791ae","sha1":"f9ef1f2104479302b59641e4c96cbe027c1f58b6","sha256":"d88e91883a2e27476a22ff2d04220aef5f07649a7faf0bac0310e8f9b458132e","sha512":"af2e04fdd969fd8634e2a0f1f5f03006a427f1c0be044288206cf3695cc62ed93207a2aee840350301698f35c63f4ac82e4bf7b971996ca977f7eb4f5b949d2b","ssdeep":"","tlshash":"4870002a00c0002c2022002803033b202222ca08020e00008000003832c000300088ca","size":21,"data":"","first_seen":"2026-09-25T05:44:41.868429Z","last_seen":"2026-09-25T05:44:42.672698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be28e4fa967374c4a243a9739bac567d","sha1":"2e73d28faf5cb5ea35296526dacc93f8def7c9c8","sha256":"5c8dfca5b649706fe28e0d0d854227df5ade841881f15b7a2261fcfa2b89276b","sha512":"874203acb903318cb80ce0e95fda4dcadb738ae910f5766285949adacadbf1192b6ee3a51a8f2f810323675c291d83f1ec0a5c051a6c92cfae432a5ec785c89e","ssdeep":"192:wIbTJIwgDwbEv5AWZJGPDaAtJZOSUopR0YzyS1FnCinOD:pbTJIwgDwbEv5lWao06zbpn8","tlshash":"4112413a13f2163229d3b0694f1be8837a68001b059b9d5d3d4d64e41f0893a46fdff5","size":9249,"data":"","first_seen":"2026-09-25T05:44:41.869929Z","last_seen":"2026-09-25T05:44:42.673591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"090ddd3307984e236a6475e6efe70b6b","sha1":"ce3b309ff3863ed4944f1bd80d4e0dab4afea1ec","sha256":"df13aad3d698c00aecec108290f596d90b5459b60c4036687d56eea7c485142f","sha512":"adbcc30fe30e4105be20f31ebab82bccd426b3851fe2153bca4fe85e1ec5db4d909bf7ae8859298c372297af55fc1b40eb06503eb523d2bd4b7635cfd8a1a6c2","ssdeep":"","tlshash":"d1c08cc058c36900c2573a90c039903b62381660917e48641a3ca3d88533256e18ccad","size":155,"data":"","first_seen":"2025-07-08T22:30:10.000087Z","last_seen":"2026-09-25T05:44:42.664465Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1f5915861c86aff02f68721451324cde","sha1":"398da6c9ba446745cdc46f944b95df6d3fb6109d","sha256":"1d2c42423e285c57afb3e2ce16857e29529e9130ded625409ad45a82a9c6f815","sha512":"9a9e69646bb058c6762147e50503191e1bc2787ed3af1a994896c6cbc7c9287e5f9d08c16bfcadcf41c29b5d4b8bca14b130e23b2f33433eed370dda5c49c4b1","ssdeep":"","tlshash":"97d0a79c04894844c2c734aac127b533523116a0c1be4c15572d9714b12363dd2dac29","size":222,"data":"","first_seen":"2026-09-25T05:44:41.875191Z","last_seen":"2026-09-25T05:44:42.683331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"31a4f9cae223f640729666e6e50eeae7","sha1":"71201c142758b120478125e49c4d237bcbf4bcf2","sha256":"e84a216098470062bc3f3b27a4c8c3d869196022a38144697179aa0dada40325","sha512":"408c7f6495b2ed8f02ae423e9ca01feeffdc27e11f0209415d36fb7ecce55e052d553676d63c8ed5407c11602487e490ae314232e5e99e92acf91ef090d56eb9","ssdeep":"","tlshash":"d8c02bc008ca0a00c3173781c03a403732382221d07ec864373ca351823302ae14cc5d","size":146,"data":"","first_seen":"2025-07-08T22:30:09.966377Z","last_seen":"2026-09-25T05:44:42.663096Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"06bc0a07946c34c66fe4c363c4611d70","sha1":"eab14efb9a9f00566a6fffa3cb956e05651e7119","sha256":"4cf7516e441f0ad6e15fcc6bd767f937afb6203494485dc39098e8a017e0cc55","sha512":"e8e3ec2b4d2303ebbb3fab590b35bd2e002b43f78bbe67f1e9f81d3bde7c297ce7788a65f44332ada900e157dfa2ae7ca357ded3a552c3bb4ad9905acfe67d3d","ssdeep":"","tlshash":"f2c02bc00cca0a00c3177781c039403732382221d07ec874373ce351823302ae10cc5d","size":146,"data":"","first_seen":"2025-07-08T22:30:09.961607Z","last_seen":"2026-09-25T05:44:42.683969Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1a7be267b93df3f8c01360c8a5a3d23b","sha1":"8304b1b647f87effc11bb348fd5944493a1a8c3c","sha256":"0263286fcd98567390a794c54798abc05215ad4bd00fdd8e09bc368e34f48d8c","sha512":"a4ff14d39cf75fe2b83073ec4848e4d738dd4f6c38d2bde88c617966fca897cd73ab65120da8ae19325a85290496a99d3a909c147117cf5768a6debee7ff75b2","ssdeep":"","tlshash":"fbc09bc558c75a00c2173991c07d543761396662917d8465173db3949533116e15cc9d","size":137,"data":"","first_seen":"2025-07-08T22:30:09.968709Z","last_seen":"2026-09-25T05:44:42.675825Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/ScrollMagic.DtXwR14N.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f43ccf7cad4e9f79c9bd92970be203d2","sha1":"28f4d5e002e8238dcf82ca4bc2b3ccd910ffa9e5","sha256":"30da4f66e183c65bfdf5e13a499e16a5115c3bb185e92d67641eb160cd27a94f","sha512":"3679097f415b8e9a2e5d5b92d589258f078f5313dba4cdfedf3a6764c4996b74096b2c85985d96d48de67c4e02c6d0782d72e6b35c1bb184613fbc6d48254959","ssdeep":"768:FcC6+Qehgl9i60s7k068SHTzlUhDCiLmN2QB0Qlm6:Fot9b0+970lU8UmNIQlm6","tlshash":"7303654d7bf22036a787f179ca1f99087376444b568aed50790c62a02f5983c4bbbf9c","size":40830,"data":"","first_seen":"2026-09-25T05:44:41.80433Z","last_seen":"2026-09-25T05:44:42.566456Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"fd9803c4d03db0c635c18c19b794f2bf","sha1":"0c37639e7152365f35c4c42175cddc9df95b1de3","sha256":"183a8cab6be98d663d6c9688466294631f86176b665aac1bb595714110c0e863","sha512":"703e033c834ba1c8c3de8fc82057b6e9abd157ddb5f9dd7b2af3ab3a0a7c16b4a5d1bf5fb0e79a81b3fc22acfa62bf49cf554fa3da06598fc4a21b0a510622c6","ssdeep":"","tlshash":"4dc02bc048c70900c21b3b80c1398037223817a0a07d44781b3cb7988033237f08ccdd","size":147,"data":"","first_seen":"2025-07-08T22:30:09.993786Z","last_seen":"2026-09-25T05:44:42.675124Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"7850c3e8541086c8c3618035c888b621","sha1":"336b5cadbdb4fc48441a21a40f14087f5d6d197c","sha256":"ff11182320c9eb4564c34888cf0db89b105258abc6b8c4065c6671ffe895e816","sha512":"0b5b2467cafaa4525702cf77776b585c95ad23996743797fdbbdf5c743d7b9edf6763aad765aea82be3d8b72cc1cb3a147592d8919e000116f9c4dea7183a99c","ssdeep":"","tlshash":"23c08cc058c36900c2573990c039903b62381660917e48641a3ca3d88533256e18cdad","size":155,"data":"","first_seen":"2025-07-08T22:30:09.959216Z","last_seen":"2026-09-25T05:44:42.665562Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"853d1a22df8f1f6eb5d7a1c4d77bd291","sha1":"c81574779d17c7fef2caa8dfc586fac2bcf567cb","sha256":"b579f116273d534aa586b5ca792fb22cbace6d85141586918251444eafe75288","sha512":"6d083c5ba6c8a31600167efab4f349876c60201d40a6b890e6e18a2f7d7a18bd5483679f44ac9ef47379dd8c30d08940e41e7c7303a66fb8d415616bad6e4fd6","ssdeep":"","tlshash":"72c02bc018ce0a00c3273781c03a803732382225d07ec864373ca351823312ae10cc5d","size":146,"data":"","first_seen":"2025-07-08T22:30:09.971468Z","last_seen":"2026-09-25T05:44:42.667177Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"27027321d1f0870eb538bada045766c8","sha1":"41bd4ce985092184e16ed7d10a6b0dfe2416af76","sha256":"a8fedbaf2d1d49314e4faa2093c5880d1115fc5f7cdc1edaf0e188b616a28404","sha512":"dc30e3248212704ee6ff54cece2ddd4b911b1002e1b109f2c8d60a9d174d74872eb2f94290609b769e0ed2570d2a41273ef80a442ae1b6c7c2b25fcf9d10c086","ssdeep":"","tlshash":"01c02bc008ce0a00c3173781c039403732792321d07ec865373ca351823302af10cc5e","size":146,"data":"","first_seen":"2025-07-08T22:30:09.988212Z","last_seen":"2026-09-25T05:44:42.679147Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"32ae3ff60a37afb43cf20366adf3ce09","sha1":"99878612b3148524276249f8966fb2279aff165d","sha256":"4fd6a17770be05a818742b121bc99d4c74758e2b38a5b59079616add19d7e45c","sha512":"34c62f2f9124639eb299088286793d9fd9ff5b740f6e6c61907b45184b14753a4f4aa753e39ba927e1cc06df77cdf0cfff047c771f6943a61212bed2e361dedc","ssdeep":"","tlshash":"24c0c0800ce73c00c343384c807590363130167180be8876213ee3808033d32d0ccc0d","size":185,"data":"","first_seen":"2025-07-08T22:30:09.976853Z","last_seen":"2026-09-25T05:44:42.687288Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/i18n.CZntofie.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1beea8383573c8e990a1a5bd1a4dc2e2","sha1":"ef8045dc5209a759ec73e7c36b20df55ea2ceb79","sha256":"1c40dd3ec5313c3ce1247a1f4320e7ab85f3bb06874ba3e6f78bf1c2d6174be3","sha512":"505918420c239738d733850b2b5a02034115a1fa320bf59a73952fa50f729bcdba3817574f73b184cb9e59d5c457a4dfc14faa45224c2922b7a2246fd34638af","ssdeep":"768:iZIkCTecNMKEFUKUeSqYG4/dm9n2O0/Pnnw4lGrQ3hikPS3DI:imTe2EFUKgTGsISPnnx3hiT8","tlshash":"6123d35e421a15ac00c60b46f1962956d6484e5bcf44b822bbad83351fee80ff3fa77c","size":45814,"data":"","first_seen":"2026-09-25T05:44:41.837761Z","last_seen":"2026-09-25T05:44:42.590223Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.PLekn-i5.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a8fb725d398ea3ff8a59b1190836532f","sha1":"31368f6a84d31966cf9ae40d42c474b166d87bab","sha256":"cda6c03d97d27423e3cf7d8c99201b2d722f2a5366cd3b66b184a5b15e1685ce","sha512":"61f0e81310592c4c668d294d4275a97824bf61c3f1530608ae55a88d576d8a3c25ea93eb6f97b180b22d6377f1a38f9bf94767a4aa6c6bf1580ae51dfca26256","ssdeep":"","tlshash":"bfd0c9a3d0d49a0901819ded1e23312c973024b8efe02421f50f1736f75497ac6059a2","size":230,"data":"","first_seen":"2026-09-25T05:44:41.846605Z","last_seen":"2026-09-25T05:44:42.585996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/utils.1aMEfqki.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"695afb5a20a205df6637357aa499c73b","sha1":"587d73560800a40d3d6b7133db34ec37d1d588de","sha256":"27c9b1081f14d255ee5b561bc3fa37b31f3122fbcea36d79a67ded2deb6c6923","sha512":"9ca92571cd42cb7177b7f5dd14fd92637c288e79154b78fe693aa829e90a11f8b1f12a2159807d50c113883e85460fc0d3a7a23cc1c54d099224062abd196c9b","ssdeep":"1536:JGLP+KjXRw44NoPpGlOHAAcu7dE+M88Hc2t1Cxr+t:kr+KjXuOG0g+7dR38Hc2t15","tlshash":"3c83328667d27931922be1390d2fcc09b669581b598ede09750c81e92f1cc3d93f9ef8","size":83174,"data":"","first_seen":"2026-09-25T05:44:41.760329Z","last_seen":"2026-09-25T05:44:42.637839Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17678951126","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ff5f149ac8547b01de65333485eb529","sha1":"fd4e053582a56c4b10b10dff499a075fb203e3d0","sha256":"8248d7f6132ed2e7b6986c824e2a44732ccc3d8a2293653af4dc91490d0c1a64","sha512":"c6f2b697462a66c83add8fe01913afbdf5f3fd687e0dbd9d1bef24c407f61ffa0d96ef5ef54bac68319f560ca9bb3473a74860c2a5bff40c044901fb6b4da76d","ssdeep":"6144:KcM4RorWt5MDZ+5cKI+IBOsFcjvgbsED/3C9lNGavOnibf4rg:X5/u1QBNERin","tlshash":"86a42acc73d674229392f678903f018bb67a69a2b44cc895f289dce42d3465a9173f7c","size":452600,"data":"","first_seen":"2026-09-25T05:44:41.835395Z","last_seen":"2026-09-25T05:44:41.835395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ef1a75e1a8f9cf5628bb54eb4e602f4b","sha1":"f6826665cb5c9208b590b11e28c5e4278311adfc","sha256":"0d80082e4c570afd9d1ff2a1987e226a484c47e60e52cb9345a349eb4ac8f1e6","sha512":"901634ff5af6c2ceb0156ff90ded124a55b5babab221e1ba4e3af5c2551aaccca8f168cb768a1a56f54f57f68e35855077f9a23b4489e6b85a77b44f792a3f99","ssdeep":"6144:pooO0BfZlKFwwLi69iamzyqVDfsD5CoW7Purf8rWRSFD937ioXXJsmIVUapteWbZ:1O0BRYpDmzPVDfsD5CoW7Purf8rWRSFu","tlshash":"5454725976f625324257f0791a2fcc0ab239940b298eee443d1c92e45f5883d93f6fe8","size":288041,"data":"","first_seen":"2026-09-25T05:44:41.844755Z","last_seen":"2026-09-25T05:44:42.632803Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/jsx-runtime.de5jISvw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"397327ba1961f54d6ebf2811214acb52","sha1":"688e98d5c0fb52d43a5e0165765d7bdbd4b34752","sha256":"0e8293a83af42f1e58d102db95bc5a90774bbb0878882b2f44fb3774ef7bd182","sha512":"67ebfb987c3ae7d435e4b0e46db24c0ad02d4f69f79510fb9c1557f05180c9481dd27bc597ad9e9c040cabead7fe76477b036e7477e37ad5636b9a30e49630bf","ssdeep":"","tlshash":"6d31fd411ed62a722363dc39926fc1587728250b5d5dfd81768c92746f785bc82b0f92","size":1481,"data":"","first_seen":"2026-09-25T05:44:41.687329Z","last_seen":"2026-09-25T05:44:42.551904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e0d7682628d49b4058a07ee351b07432","sha1":"495e9c4a2a264e6e556edd4c47e1e11d59cd964e","sha256":"cbde8c381d55266c190b070f5358c81760c38a6b516e7898e61106561628310a","sha512":"14ce9e3d394ed29f38a811536e9a8f671115115727da7072d6b92585da46a69044c8f0e6ae5e63131dc87e1d2aa9446c3cbaa88927ee3434c02633e029fe1461","ssdeep":"","tlshash":"d5c02bc068c22b00c2133880c07a4037213826a2807d8464273ca3548433117d00cc9d","size":138,"data":"","first_seen":"2025-07-08T22:30:09.960531Z","last_seen":"2026-09-25T05:44:42.682654Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/axios.BjsyESAr.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bdaadf4e35e1523a0a4b6624637fca25","sha1":"b964e024d8589555f10026b7ad07335917b90d61","sha256":"d451ff1a043b6f10e874186f613fe9b0dc9854fca1633c355e33fc2d357a69cb","sha512":"1bea157e7d7409d4e315e43cc66118d35f2cfa501dd52788bc7a83919be01870f2415967f416d5fb3421d0b2c3942c492e0b8c35d0ee0e9c00796c1a7c3600ed","ssdeep":"768:Gs6rozZ3qE8zi30MyNn6tgq+/eABpnNPVW2v3++rozT//dkKvy7OjvH7TbD6PAz+:Gs6ronHOn5eKBNPfv3+gozT/yK6y7C","tlshash":"4943724966f220364307f0794a5fc90ab329a50b2d8dec547e0c52a56f8953cdbf6fe8","size":56166,"data":"","first_seen":"2026-09-25T05:44:41.731388Z","last_seen":"2026-09-25T05:44:42.598574Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/FAQ.BaV9valr.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0262856625c9c8fe7b11f7d0cfede27d","sha1":"51ef236f28b280e5ee095eda1bcfbaa1a63066be","sha256":"4edec04ce2ed928557a8e3559e411f0958790601f1fd81f7da286274db8af616","sha512":"d13dbf6b56fd6a7403782a32844854c8f92ad282fb1ff1952eebc23da035b5c684762946db6baa379f9ee80acc4001594ff484f2e14cb173ba83aa403d575b1f","ssdeep":"","tlshash":"6a518a0592ba16669507e8900f7fdf0e7132110bae5e3c8d39ac89247f9c17d9de63a8","size":2916,"data":"","first_seen":"2026-09-25T05:44:41.689955Z","last_seen":"2026-09-25T05:44:42.633319Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"127af2e7a1bec92e7955d46267e30967","sha1":"e1299faabbb33e0c12480b10ffe7df8240a0939d","sha256":"d695daac33d938f27939381c0795cd9af7d836ac2e7a20c5e375b0f3f342dc49","sha512":"5aa5b380adc8062f699e2fa9d279d1df45aa3deeea75a6398016f80735349feea4cdfa87559440036d7c7cfc8e7f9d783943650b438f78145b51687a13577413","ssdeep":"","tlshash":"62d0a75058822c20d2472859c0274536f32556a3837d986622396b94453763ae598cdd","size":223,"data":"","first_seen":"2025-07-08T22:30:09.962613Z","last_seen":"2026-09-25T05:44:42.666512Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f2b19f7e051f9eaac223594a76d771da","sha1":"49a1d7971764ad3beb3fff4c080057631dd9b9de","sha256":"458a1c4916dd039a21951b50ed8c72db78c3403f5af1ce743f1c4d97f9321d8c","sha512":"699adb812947fe1d497327a806498ae6f4cc8a16f188189c21d8d0a0f63233eb61da7b03ef0fac2bdb6bfd75e7efc9a31f6af443a7b8a323f4370eeedf3d8f75","ssdeep":"","tlshash":"6ac02bc008ca0a00c3573781c03d413732382221d07ec864373ca761923302ae10cc9d","size":146,"data":"","first_seen":"2025-07-08T22:30:09.973906Z","last_seen":"2026-09-25T05:44:42.661159Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/client.BIBgQUEh.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"365b8457e5cc6a32829fe2b09279bc59","sha1":"eb74db596aa2ee5f42270e7331025969c214713e","sha256":"a5947db54d9c0f2af54a4dc42a4c083694c00b4ffc8279b02eb8c12e4e2e98a3","sha512":"e5e760e1da54668e6de515fd788444f17f746880c99be5564927097372976f9a04a56de84de458dbc4b8f1a08d2265e45c4d163083b42463f41540dfc3863fd6","ssdeep":"","tlshash":"b451ed4633e21a3c2557509e5a6aed0ab378340b219f8c443e8ca5687f9493c83ba3cc","size":2448,"data":"","first_seen":"2026-09-25T05:44:41.790345Z","last_seen":"2026-09-25T05:44:42.607169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/IconScatterModul.astro_astro_type_script_index_0_lang.BGih0Aui.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d54f4732d805e01d45d7b2bf39d9ba5","sha1":"2c867b8acfec4f984083713b878b93f849055ffd","sha256":"833370bc714203c5368a1a8040ec3b742923f8a9729c80ebe5e3e8b0e1374aaa","sha512":"8983cfee913b662e9fb89d6e6f1970bad58eed3980dbe8d0b82bf950eb8f545414abcf2f178c1e5563fdfb2835e88608004affe089654d4a5d245d5768c49b5f","ssdeep":"","tlshash":"1801df1512e5c53812ab16cdc345dbeceeb014fbedc69db70259a19e6f700aa03211e2","size":691,"data":"","first_seen":"2026-09-25T05:44:41.847746Z","last_seen":"2026-09-25T05:44:42.611002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"82d1660fd8979515b60b15969fcf2a14","sha1":"5c980956509873ecdd478c57db83a13cc72d97b0","sha256":"1191f48323a49dbf3d97e4653c06ed12b0911b3644d85111d3588d40564dfc4d","sha512":"bd3aa242424bf54c8250b3f1d40be72c1ac1da2504a3804678868cb20ba2fe19c809cbb2481ddbeda092e9e9693727b3261898ccb77e4afde02f5df419b4ff5b","ssdeep":"","tlshash":"06d022a04cc309308a133a8c84686cb6b27019e143bc28b5323de344c533086f349caf","size":202,"data":"","first_seen":"2025-07-08T22:30:09.957414Z","last_seen":"2026-09-25T05:44:42.68056Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e05b69ded855198804069ee6711ae48a","sha1":"f118db3e23781d9a4b1f3fe65133e2b06f99301b","sha256":"25b6de1e6b7a3a1dc7262797f9aaa2a90d9f3356d00d78c07222a1ca08bc1d0f","sha512":"68937219ee6295a7d4938be43cf294f5229b894ce75bbc47e49d2d1a3eadd3e10b09d6f3c4ed848dcb2d377485672438fd6a2b63433719271bb5c56f130c46b4","ssdeep":"","tlshash":"29d0a9e448c3290081573956c17c843e36282bf2812e09683a3c93cc4ba2296e18cebe","size":243,"data":"","first_seen":"2025-07-08T22:30:09.964277Z","last_seen":"2026-09-25T05:44:42.681279Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ba46dd34ffe65a6f006aa4b30d947159","sha1":"09d81bc5716e1826cb7dfe7ff15cbd017c105842","sha256":"259ae9447cc1369d23c174c6414bb5b980d6026f7f9291b20de0b591a188f230","sha512":"682ebd59d3f109569d3a75ce57687a9a0046ac682efbc7d39a643389f380b52d404e5e088b5a4968674d8fa79b63d63edf5c64ee70f45e4a8808b743c3bf1695","ssdeep":"","tlshash":"fec02bc008c61900c3073a85c03a803b32341320917dc474263de3608233016e00cc5d","size":137,"data":"","first_seen":"2025-07-08T22:30:09.965627Z","last_seen":"2026-09-25T05:44:42.660229Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/index.PKDgv4WG.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e63a962386c42f9db3730e1d2f047e3a","sha1":"2b5fe1768f3ff53e11ad8261dc52a13ce658b55e","sha256":"5c6d8189d6e4391bed3b7ba904f0e15239902660f5d0f4d46437bbb7d9b383f3","sha512":"b92695cf0413d6a1e1adca089beba7b4a398f5c49b5f603dc69b6a360d962977f9eac43f28317441d0c17a559d0fc5bfd30d3f93b49563d47a8f59f6358f7cd7","ssdeep":"192:mJyiQHKUhJjvr4afQdH5JHHIuzgoi9XX3eRSPmUNTrqpZ4+QRPUasg56UIkmg2Em:mIxpUafQzkkG9ouiF","tlshash":"4422304478f670309613f039866fc858b23a294b299cad10764c9af55f6853cd3b6fde","size":10198,"data":"","first_seen":"2026-09-25T05:44:41.691881Z","last_seen":"2026-09-25T05:44:42.592271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PV65Z24","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da6e320b9ef8917c6ebdd478ee4aecd9","sha1":"9cf7831a40178199a0b9400b1d11ce2644e04c20","sha256":"6e7be0d90ecba6643532902ae5ed1166ace30cf6110b342ddbe89221e3c1ec31","sha512":"66e76e88e241c079ec0adc1bc2e75a3cd9c68a89b4b63b03cc9649e6db7622fe150d1cc439f407f8de8adddb41d68f16f302e2878a2c111462563d42c845d99b","ssdeep":"6144:twp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLCT3a99:ovKE63sV7Tw","tlshash":"438429cdb3d6742293a2f578903f018bb27a69a2b84cc899f289dcd42d7455a5133f7c","size":392859,"data":"","first_seen":"2026-09-25T05:44:41.791519Z","last_seen":"2026-09-25T05:44:41.791519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P5XEP5TK6B\u0026cx=c\u0026gtm=4e69n1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dde7fff3ebb533622651dbab19869259","sha1":"9eccf368daac228e4516f59bff5f813866b3d59c","sha256":"dd416e774b67dbd5dfca792faf5ab57fd65e9315b751d8c5140e1a9475c9c47a","sha512":"fd3ccf5c516ff31ee5bea3a865e70913e2c80b49bc4a490bc0ef9bb7acd8dc2327f5bed597dba7e6fcc51b95277d3092f85b4fc1bde717fe28e02965885536ee","ssdeep":"6144:M9cM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9Hy8avOJ+jxHR4J1g:vp7+//0hBPtRJez","tlshash":"69a42acdb3c674229392f578903f018bb67a69a2b44cc899f28adce42d3455a5173f7c","size":459277,"data":"","first_seen":"2026-09-25T05:44:41.772243Z","last_seen":"2026-09-25T05:44:41.772243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?l=dataLayer\u0026id=G-P5XEP5TK6B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2741297affc560de091fcdabb685bbe1","sha1":"48bdedcbf2ed0f6312333d78241c87042331c167","sha256":"6d7e94f7348e55e16d2ee767fb60e95000537e6be9764d9900c714be2d64e1ea","sha512":"fffe9717f559018df958482de139facb977ee012ad6d4a34cd41a1e9bc417bf74ac795eaa8aba8b881e81de1bd2ae99830efceb47b2dc1a9cb69a08a54e29304","ssdeep":"6144:MScM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9Hy8avOJ+jxHR4J1g:yp7+//0hBPtRJez","tlshash":"85a42acdb3c674229392f578903f018bb67a69a2b44cc899f28adce42d3455a5173f7c","size":459266,"data":"","first_seen":"2026-09-25T05:44:41.744763Z","last_seen":"2026-09-25T05:44:42.596936Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.CGP_oHug.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c7c391fe393894b76abcb5a2fe0601d","sha1":"0d5d552a08bd99fb9b17dd1eecd1a4e824784415","sha256":"aa9f22d078ca4429a909cce23156fec9d86cdc019fccd28da3d7c3eb04702610","sha512":"716c7c1f35986b4bebd88aa0064b7bd4bb5fda46766bbc9edc6abf51de9cb8596716d633221492761c899973f78e76d4fafdfdebd3cf9d2858c8ddab07ce0846","ssdeep":"192:a6ALCIlLZDlZHxm5ro7FZn2xN4OrxNDgA2XARJQZmr7fxRNaNZg/jJVFk2C+2u5D:a6iTLlHxQgFK/xNDv3fxRN4uNVFkO2Hs","tlshash":"dc52832502f0043901ab65ff46dfcb843a31009bbd6a6d65392cae8d1f4907dd2f87e6","size":14419,"data":"","first_seen":"2026-09-25T05:44:41.826242Z","last_seen":"2026-09-25T05:44:42.584125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d0cf100c4ef34dcc4f2c50bab66cc0f4","sha1":"b6907ae28b8ed72eec788b70ab34adcb764bbbb3","sha256":"477286b27b4d474573112b532f72f3d8a52994795339046b92be966f0516fd22","sha512":"c295b9e226d99c10284e73e8b0e707c1a8d85b828348fcc6964d28e6e4f07d4de48f9348c863de0be5168dfcd033bcdb46b7b41ba7ddb5268ae8989095402728","ssdeep":"","tlshash":"81d0a7d448c3290081573456c17c843d362827f1812d09543a3c53cc4b62156e08cebe","size":243,"data":"","first_seen":"2025-07-08T22:30:09.99471Z","last_seen":"2026-09-25T05:44:42.659248Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6be150b865bc28d08b31fbdabfb072aa","sha1":"46efa6bf2fb7714ec7592da301f85d2718536806","sha256":"eff39a482be6e6cb4a2707d2a3edbb665591c6d93f33b25253e57f096e1a4510","sha512":"0aeb8b831fe3f63fa26f9fab75744f8b2bcd31293d55344e5b52d7ef779475bed205a8885becddd2a6750cc7accbe7b85c2a70791ae11e7e5a2f88afe1bac773","ssdeep":"","tlshash":"46c08cd0e8825e00c2133c8890355c3b31342ae2817ea8bb3b38a3508537126d14ccbe","size":165,"data":"","first_seen":"2025-07-08T22:30:09.975836Z","last_seen":"2026-09-25T05:44:42.667938Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"dad92cb600961ff2a7d29f073b6baad1","sha1":"15ff6f649f9c02f94d31f9861428709be6b40753","sha256":"ddefa102f0449ab60a6de1b0b2b467bbabd7316d7d5fcf7477edcfe23d55c6f6","sha512":"79b862d4008663994b1285d13cf6685c509ff0ed3309ea4588d956a0b06eae1afdc18b024284adcae4144a59dcb622e872bf7f08a8d80a1424341204327c9525","ssdeep":"","tlshash":"01b09bc55cc65a00c3573591c035543761391661917e4465163da3549573116d15cc6e","size":129,"data":"","first_seen":"2023-04-13T00:03:19Z","last_seen":"2026-09-25T09:53:43.119592Z","times_seen":6144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/TransferModul.astro_astro_type_script_index_0_lang.DPA5r7JQ.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c3c7edc15d28c18fa835297125388bdf","sha1":"4deddee20d15a7e2e2780f190045f88da6b731cf","sha256":"d6dedbb09a7619708f5b741f5c1b80b1d833b59888a803630dc9cb61ea94b537","sha512":"1f7f32c76b14048bc4fc336f34756fbbead756ba7b733c5fc6d786ac4dedfc9e8a41d8f76845ef1c7d4104ddcedb3615bb50f7b0525bf0bfde4f695d8774bad7","ssdeep":"","tlshash":"2231612a36a0483e025f34e4555bcb84283100bb9e9b1ab7346ce95d0f4a8f6d3723d9","size":1666,"data":"","first_seen":"2026-09-25T05:44:41.75373Z","last_seen":"2026-09-25T05:44:42.595691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/_commonjsHelpers.BosuxZz1.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"591f7e34ec5a617401d7710a6c3804f6","sha1":"0a7059bc4caa4032361182ed11ca87ab0c6f05c1","sha256":"ab1fe62883aa6a5a1ca1fba022b82e55e11bc454eb3ea486ed0dc2af104a6e6e","sha512":"d2a9c1a6b0eabca6836e2448c42f56a4352ed7a7fef5b14c84c42e50efefb3fd3dc7e2ed58db0cdd42edf36437a046b9aec18bf6f2388f589f95141125f7bf40","ssdeep":"","tlshash":"84117685b9f1e1a041b3b4ac422b6801f1a40873449cee807f0c52f13fa103a4ab0bd6","size":956,"data":"","first_seen":"2026-09-25T05:44:41.724091Z","last_seen":"2026-09-25T05:44:42.577696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/swiper-core.FUSIrotR.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3343c8e634309cf96ddd2ddbe0dda50a","sha1":"a8e97492f44c62411f5c81de1e054420fdf36799","sha256":"2f40ec949e50b28ed00d8985911a832b31128b64fbc292d35e08a8edbe0fbf82","sha512":"e7a1dbc676128017123072e6c7d58282dfc8a5ecb25cd379023cbdb7ad887754a2ef63f2d3a1f4c6d4612dd4ef109ab8140b9660dedba4b123b43f983d1f7455","ssdeep":"1536:Bz1XwCupBBqD6qq97q/4pFCDIa4v20mMAKbLn5PBtOTJa03p0rVc1sY:/Xkxp/a4vQKbLnlZr+1z","tlshash":"b283a20652f225384283a12f4b5fc91073baa4477e89ec983a5c46685f5d83c4bf9ff9","size":88623,"data":"","first_seen":"2026-09-25T05:44:41.828644Z","last_seen":"2026-09-25T05:44:42.567112Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BWDlLXVt.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"79de8a3aadc8e27c587961ead24d367d","sha1":"38a2c00157fd34cc35f0d3e4c4293f5da741a4c2","sha256":"aa672878ea071b54d4691c8a17329fbeff4b9becd83cac2e441e26241f1f1787","sha512":"7f3c91f60424294c192c80881b26a0c461c77206c1ada12f5a7613124d4181f0049f108af5b357dc1c5cee4638b9b0277fc8888ae92f212b6a09e2eccae81105","ssdeep":"384:nbmfAd5IqRjHbRhCpDnG+HQ9HR46/fZHgQf0TxeNKjwc:nbIYIqRj7RhUiKQ9xTFf0NWKF","tlshash":"22b2538a12f1357412c7a07b0b9e8c1273354407ba88ae683d9d9a945f5d87c4bf2bf9","size":24360,"data":"","first_seen":"2026-09-25T05:44:41.80571Z","last_seen":"2026-09-25T05:44:42.580665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a13c5683cc7a54624650f573f1168556","sha1":"bd1f9885e117960e169554def347cf6366eb5031","sha256":"2f2f7adf255311729f3504e03a3a019c5d7dea2d86f2e554a6e471cdb61c9ad9","sha512":"aa297445e9d6585c411a0a7f4a399bffcc2e6da90ecf81d25cad1e9812b6354f3b25f476abd02d18fb2a3ccee0d127a7b2df928ff84d9efec579fe666111e92c","ssdeep":"","tlshash":"4fc02bc10cc31a00c3033990c039803722392762817d84641b3ca3508033106d20cc9d","size":137,"data":"","first_seen":"2025-07-08T19:52:46.071751Z","last_seen":"2026-09-25T05:44:42.668969Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3e9f0d450737150c747717b31daa5836","sha1":"cbf0b53e3177f41226cf5788f8ab9f811df77eb4","sha256":"43b29936361a0f3e901a96b0abd53ec539261230d7c7baffd85698767325f007","sha512":"9055eeffdcb44da078e445115190781d0fecceb3fc0c40507a8337819d830751ee8a5db066b93d36af09af6c1d20aea116067564ed492651e7a4ae758b98f033","ssdeep":"","tlshash":"4ec02bc008c61900c3433a91c03a813b3134272092bd8474273ce3908233016e00cc9d","size":140,"data":"","first_seen":"2025-07-08T22:30:10.002058Z","last_seen":"2026-09-25T05:44:42.686515Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c97e1f605c769252b60d590968f7bb5c","sha1":"a1976c7b2b19ec79ad6c535371384815b4485739","sha256":"476ea9037f273a193f0098e6360944f0fcd429ae5784620d04a764d24dc2bffb","sha512":"34bc1a4ab54b077cfa981aa8558fcedb9442838875c05621e095059a64fb0a85e5ed3d2ec490c1eb0c8cc888bf95af222cd11d30313ba5bce49b57b95d6ad526","ssdeep":"","tlshash":"dac09bc45cc65a00c2533991c135a43761341671d2bd8476163da3549533116e15cc9d","size":132,"data":"","first_seen":"2025-07-08T22:30:09.989895Z","last_seen":"2026-09-25T05:44:42.679811Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.031ppWia.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"605e1987ae085d95121d8fa201c7138a","sha1":"d61db9b9f36f607acd0cce9f3cee5c9a4e81ab0b","sha256":"fa110ddee999dab548cbac4990a4085171f124430d86cc2925e9d092aad105cc","sha512":"b0b0f01b0866fe1d2ecd4632f9153d64e2615990417061522cba94d7fbc84f728b98bbb5fb101bb7b105f520587339d7b27ebac3a0f4fc71427528616634bac2","ssdeep":"","tlshash":"ea212f2685c50d3c00aba1ab132feb0c3622235fb608d401796dc2486f08db685b2ec8","size":1424,"data":"","first_seen":"2026-09-25T05:44:41.676738Z","last_seen":"2026-09-25T05:44:42.637297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNKDMBYNQ4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9693e6f7774937df6f5d3dcea0ccb40","sha1":"c658fae226e73f1dcf11a642eacab6fab974bd67","sha256":"7bd384f46572d0e3bde319535d9b457bd10920fa6349e5d4a2a93879aa8e2a0b","sha512":"8b4464a04e0e94b7d979ed0f4c3cb4e3edeac792894f5c37221d43976f9eca0097619874dae95b95520b7095c3dc80cd566f531e8725eb4b93423cd7dd0f901a","ssdeep":"6144:2dlcM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9HJDLavOo9jxHR4Qsg:kMp7+//0hBP9LRo11","tlshash":"08b4f7ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","size":526003,"data":"","first_seen":"2026-09-25T05:44:41.830206Z","last_seen":"2026-09-25T05:44:42.573266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BBT_gXEc.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1a7294d28dba5e847762198ac2aefb46","sha1":"bb8aadb18ad912e0bb3c22bb2582a6c96b52cb44","sha256":"ac3583f98e6f60fb2e58f5d008c366600c80ab9596c3c9b48673eca5ec1bfd7f","sha512":"4ffb42b17cebfe3a263203dbbe02a2fadaed29d9483ad1868e32195c27410869753f7cf19384dff187598a2d5befdeac06421aff89a54fda757202fa40b49a16","ssdeep":"","tlshash":"91f05c9241d1461a115664e58d6f77143a3211ba1b58a001250d5312ff3596bd617ccb","size":445,"data":"","first_seen":"2026-09-25T05:44:41.759Z","last_seen":"2026-09-25T05:44:42.581244Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2115938e038500c6b7f8a1b8e885a55f","sha1":"87e7629b8b4bd3bdef7f2a4c0602c43fde84e4e4","sha256":"ac58fae960bb26b6150cece6be7e5bb4451e0d04d9f1f51d1794f257bd810b3c","sha512":"16997e711a77a737612e664f4ee46da9409608836a5cc893c6bff4b565f388c868fad450d98ea2c45ad09fa3da9c324762258dca2b9ec96c7d0c66968195629a","ssdeep":"","tlshash":"e2d0a7d448c3394081573856c17c843d7a2927f2816d09543a3c53cc4ba2156e08cebe","size":243,"data":"","first_seen":"2025-07-08T22:30:09.983761Z","last_seen":"2026-09-25T05:44:42.676589Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0487bd23551ef6b7161193738eb1473d","sha1":"403062141b585aa7598c32446bd1b876c20094b3","sha256":"84f01fffc980d08e978cad6a2c7e575914cf4d478a109ed28a636f97a8407f5e","sha512":"8695ea9d0463d6d8c15e6ee34240d2cefdbab3de9cf06aca4ee6f16723758c8ee002af6cebaf0f3c4f1696f197655710474f02e5dbe722d1731149000abdac7f","ssdeep":"","tlshash":"aac08cc058c36900c2573990c039903ba2381661917e48641a3da3d88533256e18ccad","size":155,"data":"","first_seen":"2025-07-08T22:30:09.99199Z","last_seen":"2026-09-25T05:44:42.681911Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2dd04dca76f2408ab5f4ca46e5389f6d","sha1":"1ab0d97fb4d744fe802da8f2ac4bf5e9a312d038","sha256":"2c658719f6f7c74663ef5eb292da3cfefb078cda1eac4ad97c3d7048659a3a6f","sha512":"2a8300bde949fdff2d880cc0f125672ad997a7c97f9e34e08a283b24c1276a3987e62b853a76204a437079441cf723db142faaaf1ce0d1adc990b385862f5ab5","ssdeep":"","tlshash":"7fd0a7d458c32900815b7456d17c843d362827f5412d09543a3c53dc4b66256e18cebe","size":243,"data":"","first_seen":"2025-07-08T22:30:09.979177Z","last_seen":"2026-09-25T05:44:42.685696Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"418250bfd6608e3b4f5a7024dff49cbf","sha1":"70384b1baca05c596e9b44c9abaee6544bff5062","sha256":"8865ad7b102bbab02d48023a656d80426c9da5725b3b9064bc886992b57ec519","sha512":"673de2d4b386172096e0ba163b9ee6540e5b023963ce8953a7b2c9e5460b48426d91460824cf1c5929a31aa59d08261150d9a8214a53995ebe845ce1799cbbd8","ssdeep":"","tlshash":"77c02bc00cc32a00c3133480c035403722352322827dc4651b3ca3908033006d20cc5d","size":136,"data":"","first_seen":"2025-07-08T22:30:09.997402Z","last_seen":"2026-09-25T05:44:42.677392Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1aa670f6fcb2135e4098f801cc17faf5","sha1":"4ec97aafcea6c595e0f00b77482746a161dbc762","sha256":"4c036344362b0d0aceec6a39e5b1d999ad670bf6bee14d0be0c0615388b2986b","sha512":"51799e48ad88ec61994ebde9d40c2d3d6e4dbdab79a1c7305ae9bbb901e25682128ddc6ec00f643360f4bc3a5fe15c01400081eeae604f6cd6c5b18ca14042bd","ssdeep":"","tlshash":"f4c09bc458c65a00c2573591c039553771352663917e4465173de764953315ed15cc9d","size":132,"data":"","first_seen":"2023-05-14T22:26:50Z","last_seen":"2026-09-25T05:44:42.678109Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj74 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:ERR_BAD_REQUEST writable:true] config:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj75 class:Object extensible:true frozen:false isError:false ownPropertyLength:16 sealed:false type:object] writable:true] message:map[configurable:true enumerable:true value:Request failed with status code 404 writable:true] name:map[configurable:true enumerable:true value:AxiosError writable:true] request:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj76 class:XMLHttpRequest extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true] response:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj77 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 sealed:false type:object] writable:true] status:map[configurable:true enumerable:true value:404 writable:true]] ownPropertiesLength:8 safeGetterValues:map[stack:map[enumerable:false getterPrototypeLevel:2 getterValue: writable:true]]] sealed:false type:object]","filename":"https://redotpay.st/_astro/axios.BjsyESAr.js","line_number":1727,"column_number":24},{"level":"error","text":"[astro-island] Error hydrating ./_astro/FAQ.BaV9valr.jsexpected expression, got '?'","filename":"https://redotpay.st/","line_number":1147,"column_number":49}]},"http":[{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/youtube.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.349Z","timestamp":1790315002349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/youtube.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H66meuV87K%2FSbZHKvQQz8cpjSngs3twsgxj6GHztXfh6isNmVq4DHRbOhbURYRIQlInJISqw18Vt7zJnVWtXOqDm3nXqDngGJ7%2BOCLDXJ3i11Gs3%2Bqu0go%2BQLPXGLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd2ab1b8-OSL\r\ncontent-length: 2839\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6385,"size_decoded":3633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d29584456fed2f8b20990a4b16e2af6a","sha1":"647d01c624909532b0d3cf5937722a6e19fe4675","sha256":"aa82bb1f97ca414a0e871ebdfa5910d4296056ec15331c31dcc8b6e78f4c3578","sha512":"0f339fa41890f58137fac347d8c4621afcc97c24d76eb32f2df049c0013738140dfcbbaa748a417bbf1619d52092a5b169a11a223d08afc1bdf1a3b4634df780","ssdeep":"192:BP50HPRkudsh9+7E7BlwLgOOREjCLDMz8M:BQ5E+Q1iLv2LDMIM","tlshash":"70d173cd77b892e4f400f2fac32520b97d465ce62682c971c76a2e06a5c645c8fa5cc7","first_seen":"2026-09-25T05:44:41.673772Z","last_seen":"2026-09-25T05:44:42.556517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/online.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.392Z","timestamp":1790315002392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/online.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCr38RJz5DF9h7rzjhSKvAl3H%2FkKgoG5JB%2FAe1g1StD3nBzoB%2BaCg7rG23fKcv2q1H0w5fcUzq%2BL4IL0gvl7%2BfhFDr1LLUvkqsXLTHH%2BaHnwnr8B7dAh2PwB82gFgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd7ab1b8-OSL\r\ncontent-length: 476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":989,"size_decoded":1273,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"967d911a28bf478b0a0abe40e2b32e16","sha1":"946dcd05a9b0a62e7a5885520e73f2d5226ac8a5","sha256":"9e1e08c0707de1eb5b6ddd51da4c3a256d4174e9cedf9ea6a1f95e0658da28cf","sha512":"9e80f9fe646e7c4258f560769a7914055fb01ffff3578dfbd641412857219aa0197bcc8314687212aa3903781e7c5f8d56c9e1af080e5fb2769407153f6137dc","ssdeep":"","tlshash":"ba1125a4908cc3e46209d72cfd4f17343d6ff0e27a6bd65033c599262c54016d4c6dd8","first_seen":"2026-09-25T05:44:41.675344Z","last_seen":"2026-09-25T05:44:42.575807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.031ppWia.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.738Z","timestamp":1790315002738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/hoisted.031ppWia.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uDXsWN%2FbLBANmbuZvy46yh3kiNMZu3V44hp0v53wO0qmJ2SMBBabjSJDat777wNUG9zilK25Dckr6bqtvp9yOA9pEeSdcYCIWl5G3H8o1iYH8FKo5wyIHFLOZ5yWTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff1dfcb1b8-OSL\r\ncontent-length: 600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1424,"size_decoded":1399,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"605e1987ae085d95121d8fa201c7138a","sha1":"d61db9b9f36f607acd0cce9f3cee5c9a4e81ab0b","sha256":"fa110ddee999dab548cbac4990a4085171f124430d86cc2925e9d092aad105cc","sha512":"b0b0f01b0866fe1d2ecd4632f9153d64e2615990417061522cba94d7fbc84f728b98bbb5fb101bb7b105f520587339d7b27ebac3a0f4fc71427528616634bac2","ssdeep":"","tlshash":"ea212f2685c50d3c00aba1ab132feb0c3622235fb608d401796dc2486f08db685b2ec8","first_seen":"2026-09-25T05:44:41.676738Z","last_seen":"2026-09-25T05:44:42.637297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/third-pic-4.LjBJTn-a.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.962Z","timestamp":1790315002962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/third-pic-4.LjBJTn-a.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cA21BCDuC%2FU%2FEWkcfgkimi13lBTOpaXZHaWM80QeQkgHT5OHfGEliYkKDpPWVxY67bOw0fA6VOvZvgrrptjvwc%2BbwHtE%2BYjqFlP0a7xjBwtiWwwMTPuEhRHrs0hMZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6008e3db1b8-OSL\r\ncontent-length: 25940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25940,"size_decoded":26687,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"874948e45f02e8a54c20c3dd83114ac5","sha1":"5c7632f41ca2c75cd11a1087112e190955e2ddaf","sha256":"b161e9ad46d8f3a51408e31663631c53440d0939c509c6dccaaa93e434a24ac5","sha512":"a70147c6bc0ea3fee855afceaecf52176de55ca079e34a6d6a242165c09d7114704f0b491529a8be353ef0898a2c58ea03ae2ca0c4f3ba585410437f03b3ce18","ssdeep":"768:dYytYytYyGUE7SM0ykaasy18cfvX/I83YEU:dJJ4usy1zXxS","tlshash":"6ac2b07d5f65a1b7fe67e678faf07ec851c7b114e6307a907c701b52a486006638908f","first_seen":"2026-09-25T05:44:41.677702Z","last_seen":"2026-09-25T05:44:42.560234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firebase.googleapis.com/v1alpha/projects/-/apps/1:692475463910:web:2d8d527af0109584f55327/webConfig","fqdn":"firebase.googleapis.com","domain":"firebase.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.119.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.428Z","timestamp":1790315003428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /v1alpha/projects/-/apps/1:692475463910:web:2d8d527af0109584f55327/webConfig HTTP/1.1\r\nHost: firebase.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpay.st/\r\nx-goog-api-key: AIzaSyCRecYEC-N8KUvBLvKnq497EKlOKlWHuBM\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 25 Sep 2026 05:43:24 GMT\r\nserver: ESF\r\ncontent-length: 194\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://redotpay.st\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":273,"size_decoded":685,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5f8f11f9083659f299da440dd3195126","sha1":"5b4bc141d379da910dfbabaf5c646de11dd8b04b","sha256":"18ca45bd73f9bf26589820ba78f0838b51b92738aaa0290c9f342539c5135961","sha512":"ecf65b7edea3c619225279a9ebabef14ca74f3d5f740dc93336dc267f7ba122e71d9b64e23d2c157ce70df054c188894000229f3f7d751bf4a11a542f68ea600","ssdeep":"","tlshash":"b4d02b006181e8330fe20658b0d03840675b9e0e02a4b0b937cb77715d8e55fa2b1e8d","first_seen":"2025-07-08T22:30:09.921473Z","last_seen":"2026-09-25T05:44:42.560912Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/ali.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.342Z","timestamp":1790315002342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/ali.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGxaPOv2v4%2BRdbfST%2FXJLFQ908jUWWNfRTTjAWWi%2F48eZQlfl%2FhNlxLvpaYyPauV1HqYlxVVjL3FzlMHU0t1znXPeseJ7%2F2w%2F0NErTf%2BFdLNCWlWW1MD0eEDyEyoZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad23b1b8-OSL\r\ncontent-length: 3094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8600,"size_decoded":3894,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4234457d93893b5ab32e7f7050a5af3","sha1":"b348722de1a84ea104f6f0712fef19c6f00dbb18","sha256":"720ebd8691b07e317d1500234344ddb5450264944f89240301370c6b91108973","sha512":"0fa60b0d4c2055536bed455a818f22140e4b0ffb4ee8cbde175b5fe20dcb2ece5658849772a72338d33a8142889cdac321e08a0131329ad5c2038a95b39c5888","ssdeep":"192:U9HUfrzzOoBv86Pu28jq1y9NOmE0fPUu5xJAqrnLRb/+h1nlFitM47Gj:Uwzvd86221yTDbylFiC5j","tlshash":"540292d83b72d1f8fc01f2fa4741a4387a4168fe3953d59487980d0ab55942c8ea6eeb","first_seen":"2026-06-08T03:39:50.367239Z","last_seen":"2026-09-25T05:44:42.612687Z","times_seen":3,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/starbucks.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.344Z","timestamp":1790315002344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/starbucks.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=900I%2FKaw2RitA78kUlJP11mF9aDkdh9XIK7Iv6w7pQedahgjxl4VKiZ%2B61gBbA6ilgnFqSDct0DbEC7mHAEKJp6%2BZqn0NnflH7kDI2wKD20haAYStkMFdgFNu4Wk%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad25b1b8-OSL\r\ncontent-length: 6255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15697,"size_decoded":7049,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d84f0aceb7765f3a9d1e02b8209bd4c","sha1":"2b4589b016dc87c30779292654f338efcb052628","sha256":"f7327220200fc20d240812abff73bc4ad6cb499f77c6248a8b1ed8cd72acdaa8","sha512":"7f570e1bd987bcd16650246719d87b80ef538eb45b479ecef23d944256c5fefe4fa030b4876994abfdcbedeeaeafadecf1d88eb1cfeef1693c3f51de26495905","ssdeep":"384:cCh6uRABL9vSoxZ6GwxQgLcqXVwxq1dDnsX2Os7+XF0QAyalr:cCgcUL0OwqPw1dDnKs7+GQalr","tlshash":"af629589677692fdf004f2fd9612a8743f429de23a21c969c3e50c1bd84581d0ea9edf","first_seen":"2026-09-25T05:44:41.681753Z","last_seen":"2026-09-25T05:44:42.646625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/card-5.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.361Z","timestamp":1790315002361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/card-5.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbetAwLku9x%2Bf%2BfIU43GHib3hed%2FFqRULA%2FNtoUR6x65UBZS1ReDisQM9l1RDgPJM7xmzze9SU%2BEYKiAQB7u%2Fja267lDy0GTUUkqPws8adpKdicMZ0TBsBTCDcB75A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd38b1b8-OSL\r\ncontent-length: 4896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12272,"size_decoded":5694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab679196cd51bb413dafaf33c8605661","sha1":"7990aaf5072614eb8dfa410a301f9a4cd3663588","sha256":"7d273206b40adf98d5a9806aa171a21eef6eaaa7e352dbbf7870c3ea735c4f17","sha512":"e1ff5164f2d4e9de5f068bcf3b1ed7d1dbb7fc1ded5e9016aa6e3a920c01d58c8cb03c60d76e4f0ec7ebd7f5900c41ea8f388ecf1ab7d7a4130659c651364e20","ssdeep":"192:qtUDiDWHxqfmTtPjTqHRHvSnqgTIFcH3wph279e8VsPDnGwAd+W0BgWnEkgSpXaq:4UmKRKEbTqHNzgTLH30I79e8VsPb7wZY","tlshash":"6d42d9fd177466eafac4f3eeef024168360761f6e3c5ca30c264ae55240989adc29dd4","first_seen":"2026-09-25T05:44:41.683167Z","last_seen":"2026-09-25T05:44:42.563744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-country-1.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.399Z","timestamp":1790315002399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-country-1.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77DBUO5P0ZD%2BYzGkqRUNjrhEZkLeTWdYb0UXBvqH1vFSByAEhkRXq9eyuTPIep0JNLLwf08ay1bhzH8hk1ZHL3e8rS8jsJECQsMdFB6%2Bo%2FvWw2mL9Y3XjmLFBrvgEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd82b1b8-OSL\r\ncontent-length: 2347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2347,"size_decoded":3090,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"6833151e97d6d9702c32bf265d682878","sha1":"7d6f0c1fe49abdbe547f2baa67f33577500d70c3","sha256":"0acdd4d9c289549c2674c50fb439cbac4bdedf669c2297f3cf7121827dd74b2c","sha512":"74f1cc621765b17bd99514a825144104ae77c5bc1f3046a0e1fef6458f4924680074799128b60c02729e745305e3c15fb3e67811830217c5149935ad8cea0c6d","ssdeep":"","tlshash":"d7410ba75199e1e81938097c74dc2f49fe3e38d27a58555790b674c830adac4294c74f","first_seen":"2026-09-25T05:44:41.684401Z","last_seen":"2026-09-25T05:44:42.592911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/font/Redotpay-Bold.otf","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.947Z","timestamp":1790315002947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /font/Redotpay-Bold.otf HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.pZZ2GgsI.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: font/otf\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffHqx8gfMLUWTCEUTAzFdb%2BWSM%2F16CtnEbN4QdHMxW8kYs7oejWAfd8bBAAPugjPAkTgxC%2Fe%2FM2sVs4ryi6kuw8FrBYgzr4KAaRhtJWmlQLGUzdINoKAL54hOFxuDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6006e30b1b8-OSL\r\ncontent-length: 62588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189160,"size_decoded":63332,"mime_type":"font/otf","magic":"OpenType font data","md5":"2a3ccb9eea33dd8fc057dd680694effe","sha1":"7396e9d78a2f4e4aa9002c6b63ba46f30ab17110","sha256":"2a77cbb1d60a11db113925a319769424b3151770604151674929c66d6e3149f2","sha512":"6e1e61418b074acbf727458ccecebc8858e0fdb56400a4983a5093a88d8f031ca8087dd71459d82ddb59102082af89dc2ead2d2d2708553c77da310c76223aa2","ssdeep":"3072:0XsQt2/xwdVccYlPXMy4cNdyrLATMIHEIwvPfpS+rS:FQ1dLyMsMIH9","tlshash":"8d0450037d4af455cce4067a85adcf630bb3eede1c14528366e12e424feaf624b2529d","first_seen":"2026-09-25T05:44:41.68599Z","last_seen":"2026-09-25T05:44:42.617271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/jsx-runtime.de5jISvw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.136Z","timestamp":1790315003136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/jsx-runtime.de5jISvw.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/FAQ.BaV9valr.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQ15eJ5K0XY%2FylM031b3y4G%2Bs3LPpG6EFL%2FhOZ%2Bva4cC5eqEidUzJX3lg6yXwbqpq5BT2G7o99Hqb4YUimXNVWTPBydPh4KSq%2FX3ynAgZjTwn1RjJ7DMKSceLwm4uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6019e76b1b8-OSL\r\ncontent-length: 656\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1481,"size_decoded":1463,"mime_type":"application/javascript","magic":"ASCII text","md5":"397327ba1961f54d6ebf2811214acb52","sha1":"688e98d5c0fb52d43a5e0165765d7bdbd4b34752","sha256":"0e8293a83af42f1e58d102db95bc5a90774bbb0878882b2f44fb3774ef7bd182","sha512":"67ebfb987c3ae7d435e4b0e46db24c0ad02d4f69f79510fb9c1557f05180c9481dd27bc597ad9e9c040cabead7fe76477b036e7477e37ad5636b9a30e49630bf","ssdeep":"","tlshash":"6d31fd411ed62a722363dc39926fc1587728250b5d5dfd81768c92746f785bc82b0f92","first_seen":"2026-09-25T05:44:41.687329Z","last_seen":"2026-09-25T05:44:42.551904Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-country-2.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.400Z","timestamp":1790315002400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-country-2.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHZKepL5yu53lkD2uRhnyrrenmXxontiNeHXvEnMN%2FrMcbB9tnyVLiYWL0PmHNKert0HS49SmVOVdhviEAaCH8Sz7SlUBbqfDSF6n1XQPoWKUa1cmotF842VDvxB2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d83b1b8-OSL\r\ncontent-length: 220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":220,"size_decoded":960,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"e5b2c01073f5470d01ccacaa91b7076b","sha1":"f8e246f3d9fdad52753c5e4c0c5609008ea459e6","sha256":"9982b32f9332f47b7bdf5089f3bcdd738931dd96fdefd3af1464ad137a103946","sha512":"a9279e771001c7622eb3f7ca80002145e4a6efc2550a777ccbb3aa8117d0a6728f58e69f9dfa3613eb464181f822d065401449eb83f2db6a86087d8ca7634aad","ssdeep":"","tlshash":"ffd022c3f62408788f6802ae01e28da29b3d204e111f9828fe0466a91224d4c2a8e383","first_seen":"2026-09-25T05:44:41.688656Z","last_seen":"2026-09-25T05:44:42.601064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/FAQ.BaV9valr.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.955Z","timestamp":1790315002955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/FAQ.BaV9valr.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7Mi5R67WfBQn4oHNFAeoYfkjfw7RTJBfg3Vn%2B0kYOv3Rvw8y2My8tHd4bj0VEkfMdWvhDZP2Jcc4TM5sOjJkZe1FHARKWby%2FNYvLYMimdB%2Bhiy0Q2%2FnPvAPoMbDBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6007e36b1b8-OSL\r\ncontent-length: 833\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2916,"size_decoded":1638,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0262856625c9c8fe7b11f7d0cfede27d","sha1":"51ef236f28b280e5ee095eda1bcfbaa1a63066be","sha256":"4edec04ce2ed928557a8e3559e411f0958790601f1fd81f7da286274db8af616","sha512":"d13dbf6b56fd6a7403782a32844854c8f92ad282fb1ff1952eebc23da035b5c684762946db6baa379f9ee80acc4001594ff484f2e14cb173ba83aa403d575b1f","ssdeep":"","tlshash":"6a518a0592ba16669507e8900f7fdf0e7132110bae5e3c8d39ac89247f9c17d9de63a8","first_seen":"2026-09-25T05:44:41.689955Z","last_seen":"2026-09-25T05:44:42.633319Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=16\u0026frm=0\u0026apvc=1\u0026auid=1757129313.1790315003\u0026dt=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026tid=AW-17678951126\u0026en=page_view\u0026dl=https%3A%2F%2Fredotpay.st%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=590367899.1790315003\u0026navt=n\u0026npa=1\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026tft=1790315003118\u0026tfd=2001\u0026tids=AW-17678951126\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.125Z","timestamp":1790315003125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"POST /ccm/collect?rcb=16\u0026frm=0\u0026apvc=1\u0026auid=1757129313.1790315003\u0026dt=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026tid=AW-17678951126\u0026en=page_view\u0026dl=https%3A%2F%2Fredotpay.st%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=590367899.1790315003\u0026navt=n\u0026npa=1\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026tft=1790315003118\u0026tfd=2001\u0026tids=AW-17678951126\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpay.st/\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\npragma: no-cache\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://redotpay.st\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":540,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/index.PKDgv4WG.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.137Z","timestamp":1790315003137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/index.PKDgv4WG.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/FAQ.BaV9valr.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNR9yAB7GzdK5n7rOS%2BYYm2ukojibWR1dW9%2BWKzpMrAC%2BE44Yw%2FFjjaZ8hRVZAr04Pd58nyWEmyolbQJmNRNoa9K2Y%2BP%2BkOn65CBowC2xymWYnUhK85cBaE2MholiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6019e77b1b8-OSL\r\ncontent-length: 3131\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10198,"size_decoded":3941,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e63a962386c42f9db3730e1d2f047e3a","sha1":"2b5fe1768f3ff53e11ad8261dc52a13ce658b55e","sha256":"5c6d8189d6e4391bed3b7ba904f0e15239902660f5d0f4d46437bbb7d9b383f3","sha512":"b92695cf0413d6a1e1adca089beba7b4a398f5c49b5f603dc69b6a360d962977f9eac43f28317441d0c17a559d0fc5bfd30d3f93b49563d47a8f59f6358f7cd7","ssdeep":"192:mJyiQHKUhJjvr4afQdH5JHHIuzgoi9XX3eRSPmUNTrqpZ4+QRPUasg56UIkmg2Em:mIxpUafQzkkG9ouiF","tlshash":"4422304478f670309613f039866fc858b23a294b299cad10764c9af55f6853cd3b6fde","first_seen":"2026-09-25T05:44:41.691881Z","last_seen":"2026-09-25T05:44:42.592271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/apple-pay.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.355Z","timestamp":1790315002355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/apple-pay.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWARHNEp981DN%2F9OlqKI9FCzn5NtyjpApxVelRRjkA6wE55%2FPij3qbrzIHk22A9fECd5v9xwKpcyA2N7PXx1UQPI6cWy7zV8fczt8xgj9JWPLWO2wRfnu22ZCZRvVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd30b1b8-OSL\r\ncontent-length: 1228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2639,"size_decoded":2018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c32fff35ac70446e929b21682c38fa7a","sha1":"6db96d6e60be157273af573e77cc5e0b76734a4b","sha256":"0bf3ba1b5597573c8a8755d3a74b0bd231b150f48965395250f4cabf325b0849","sha512":"d4ab7f1637941fd49082f54d8bab8cf8e8647c45a518227fc8958637348c007d3e8a37c3d3d1b4ca0c712fc3125a76730c114b66ff027135c042b41d6070ab03","ssdeep":"","tlshash":"235188c5729ab1e8b406b7b4e3023867f63b38ff7912d76402d04999e95406cce9ac4d","first_seen":"2026-09-25T05:44:41.693497Z","last_seen":"2026-09-25T05:44:42.631604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/favicon.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.854Z","timestamp":1790315003854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/favicon.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003; _ga_PNKDMBYNQ4=GS2.1.s1790315003$o1$g0$t1790315003$j60$l0$h0; _ga=GA1.1.1384861762.1790315003\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClyPv61vE1bU5D6FSreAebC2nslnylrPXyR5IreucrlK%2Few5a3cZC2%2F%2FAAYKlpgmo6m8yeOSwR%2B5rvFxCB%2BtokNzMOhDXs7VtIdy6Vq%2BjTpzsbAHkm00lnVHOPkKWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a407b6061f2db1b8-OSL\r\ncontent-length: 4670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4670,"size_decoded":5422,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d504f3275d8a90eec693a63f5cdc0358","sha1":"d007d848f589e345097b26d15fc1ba8bff69b97e","sha256":"7579f87dfb3828cf31902daea4be5cb2e9d80b81ba9230776c67f3566089e68a","sha512":"2f16c99cecaee926924f6075e4ab1804394266580160d04a46225986bbb9173d487b27c7ba7bce1beea3d8c3a3092bcb6ec4630d5234dd156ba19bb85e7cb7bd","ssdeep":"96:HAjC2e6x+RNIlWvl3JCxFk3HQtM6gV9oxityHy:HAjPIRiE6xFk3HQtM/9oqN","tlshash":"eea18de02e9c012944e8a36b43bd9947ea5686af9f2142db244daca12c9dfbd01c450f","first_seen":"2024-08-19T20:31:50.614774Z","last_seen":"2026-09-25T05:44:42.642882Z","times_seen":16,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firebase.googleapis.com/v1alpha/projects/-/apps/1:692475463910:web:2d8d527af0109584f55327/webConfig","fqdn":"firebase.googleapis.com","domain":"firebase.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.119.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.856Z","timestamp":1790315003856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"OPTIONS /v1alpha/projects/-/apps/1:692475463910:web:2d8d527af0109584f55327/webConfig HTTP/1.1\r\nHost: firebase.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-goog-api-key\r\nReferer: https://redotpay.st/\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://redotpay.st\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":498,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":56,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/facebook.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.351Z","timestamp":1790315002351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/facebook.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOEvLwedXhtF%2Fxb6DXXEqFSNJo%2B90JoQetWDDN%2FcgjY9VP4rk2Gd1fo%2BlAqrOg8cz87WmJi4IG%2BXBO3oiNYN2z1ia6Ktu7T07eHQ%2BrLF%2BkiSXqcG9j8rJkEkCd56lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd2bb1b8-OSL\r\ncontent-length: 2363\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5526,"size_decoded":3163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e40186f99ee2608dc9c03f7a49567cfe","sha1":"2ac80b670936bbd15a5ae51ecc7cf25c9f1c9c7d","sha256":"0f890f5e730c118eed8d79145fa2db4087148f6d938d5d608bd1ff59508d2c65","sha512":"1962dba90d890a354c935428966cf48ba42cd954c42a709a8467264b5973844e68e50dfbfc03c7fa50cdf222d8c29442eb8e3ebdf02fe057cd5d40db129437ca","ssdeep":"96:AZOJrPMJpTODGZaEUKR+5gLg1dBU49+padNc06KClet7anYDzf:AZmMJ9cEUU22ge2rdP6KCgt7aYf","tlshash":"9fb195cdafb293fcf040b5fe590364743aa14cda79818b74d3a52d06e5860acad61ce7","first_seen":"2026-09-25T05:44:41.696392Z","last_seen":"2026-09-25T05:44:42.643642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/third-icon-1.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.364Z","timestamp":1790315002364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/third-icon-1.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BW%2BSCOvCAx2AN6D0tLdqo2ExVOebJo5F%2FMiBGeZQvwU0iciMC2yKe1DeoFV6M%2Fs35fGOEktSDXkRc9tzDpqyQ9JsZfD4BUd64tEjIzQwqner6bZWuxoQbrDg%2Bzdnsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd3bb1b8-OSL\r\ncontent-length: 707\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1483,"size_decoded":1500,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a6773f08691d34da7e79f8ad75fc123","sha1":"b74bd6640d1c5bb21572207f7d4161456d9269e1","sha256":"b7af68aeb2e3db07e2d2416b13a3aa90916af31e3297d1cde5f86368c6cbfc07","sha512":"a60819d489e638081a3c9ae74ec3b3dda5747b979112cd1204c8d145670f3bd18083744800b5059b205b1070d6c2933198126b6d3f13a4288368a399ad596b74","ssdeep":"","tlshash":"c03112ffa594f1e0ca0f8bb0dd56dc9e6e9b18f6bb574ad4804085acf9452d0160ac90","first_seen":"2026-09-25T05:44:41.69737Z","last_seen":"2026-09-25T05:44:42.621723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/travel.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.394Z","timestamp":1790315002394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/travel.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeimhTTGrAFVya5AerVnaGivfrqG%2B6DPXsf9gVxq6VEtLyrWvk%2FBlz%2BpwJMgJUOkTVWQq75HvXyIvpBEPa5UnLhcB8Eub%2BjT8uuOisaYpV9h7MoYGEabiyYlixPasQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd7cb1b8-OSL\r\ncontent-length: 492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":952,"size_decoded":1285,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb0c95f897887de17e8e8ec61032670d","sha1":"bbb34dbbdeb14e0b3c1960996f05d95fae2e91d6","sha256":"c64d9f17dec29f87c8942b547bba6418193bd8048e8289b7cf7b1e70d6f749c4","sha512":"76cf5729d5e2261900ff117c36a26072ccae4a8f88522b963b3299fb8406e6239d97f31cc11cfaf3dd1b0dfdf3686f9ac6e7050b1532be7513cd396f058de25e","ssdeep":"","tlshash":"b91144f693a8d1c49e0cd7b0217659e1d66fb0f0d14b490af384d5adb0ee19a0f08978","first_seen":"2026-09-25T05:44:41.698265Z","last_seen":"2026-09-25T05:44:42.65237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/third-pic-3.BvGod5iy.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.959Z","timestamp":1790315002959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/third-pic-3.BvGod5iy.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iNBImXMJrg5KJmy814u8aYrMB90e4YBSWdHDM3b2WDz9NmeKrxrlSmfUdemaBagbHbvuJhHPL0pArI7nUb1MZ45oF3vqSG5Bx4pVSoIVVqhtKb9zWXNmM77IFa%2FoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6007e38b1b8-OSL\r\ncontent-length: 12338\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12338,"size_decoded":13079,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2316c13f23cca812c6b22c4cfd167a06","sha1":"48d7dd6254992e0d77a670ad3bceffacc40676d1","sha256":"e9f7a5d53e1c0d860e290445222be2172dc85b066a87f2be791d59632a73285d","sha512":"205c5d342a5ad9e4d5b5edc3176b2889bafea17653c5d88d03f72bf248e55ad752b968480e5c25c138c0f0d00c21b46f58a0dd1b6199d7b6f3d5987b9c33b48c","ssdeep":"192:pjOOqBaOYOA/aLviVc1Aj3CfItS+aXLKk9blVDOHY+hebxR8dYh9wtYV:Rnq0OAgviVc1AbC2NsLKk9nMIb99J","tlshash":"c142b02947c7c0a8fd6453e805c9e2c9dde7f9343640b994a51988ff8268df1e0dc0b4","first_seen":"2026-09-25T05:44:41.699695Z","last_seen":"2026-09-25T05:44:42.642048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/six-bg-5.DqGIrMss.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.981Z","timestamp":1790315002981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/six-bg-5.DqGIrMss.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.DqNwwtWe.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfvRznzCmjODQjOMicojimoDoMW0tPbC381uPeMPfB4pq7bQZCCdx%2BKvnQT%2F6ry6wCeyUQeW7NQznazfOCTp9%2Bu2N0LDia0XW9oQYlHq%2BssIZRMTUOIiMaLYnUrfNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b600ae4fb1b8-OSL\r\ncontent-length: 27590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27590,"size_decoded":28337,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1602x1500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ef9e0b934b83d37d6820e802badb503","sha1":"84ecc853a021f5423dbfae51f8397d3ed9612ccd","sha256":"e0bc7245dbeffe35b728f208d292eec38dafea822755765be590f690d006d4ac","sha512":"9c2846b4a4b3be50a4320ff05386964b431cd4591992704f8bbf0df488294d1940f1c0c8f31747d6ed2accdd27a3253e0c54f7abcd37aacba436d35717771809","ssdeep":"768:Zi2sWZ7wMaKqhP0RrHWVJMG5janfSKjh6e1:ch3Kqh8RyoG5janfLjh6","tlshash":"a8c26acfcf9e9528aebe0b2d03d94538101757ed285503e2294ededdb38d38550baa8c","first_seen":"2026-09-25T05:44:41.701535Z","last_seen":"2026-09-25T05:44:42.570889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-eth.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.359Z","timestamp":1790315002359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-eth.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18lT4SuOdFI0z2A8s9N7qK%2B74jh%2FPSMzfI%2FlBgfK%2FUXlHw7cY4DlMpBSpU%2B0t1Jml5J9%2BKByBcpyzdSQ4aTx95qJpHVAh1FuWJBmjIYiMmp2Xt%2FoY4qMIICKI%2BwzvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd35b1b8-OSL\r\ncontent-length: 220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":699,"size_decoded":1021,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b7334eb5b465b477753dd9031432d71","sha1":"4e9372517dcbeb244f7bb312432d32e78a0b9962","sha256":"1ea1abe9334a09b641ba309cc1a67dc495c324265f7a85beb4fbfb4aaa4dea7e","sha512":"9b2c28a1110919ceab8aea86a7cfb032ea62520cc1c1dd55eb96b45687702df9a00bc678fe4ce78510c3e189134fdf34321826e8ae2e695c083315edde8939c5","ssdeep":"","tlshash":"f101d4a11279cb0145356f38e74cb42e5ea2def9ae8c62c8d2410ac5bae214b8834ac4","first_seen":"2026-09-25T05:44:41.703744Z","last_seen":"2026-09-25T05:44:42.58475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-expedia.D6DXYCwG.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.380Z","timestamp":1790315002380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-expedia.D6DXYCwG.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKqwFHRG457wwEk4Tdt6Jyg99nw2cNgvpYAWmWpeneuV%2FzVV6XymZenK5uPFQoGDTry0dIpEqM46Y2zZTUetU8m5hHb6fFpD8dJSlAtk1Kxx%2BTt6JxEOYnFgwQcwuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced6fb1b8-OSL\r\ncontent-length: 9584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9584,"size_decoded":10325,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88fb1a14f8b69809380b28c175262e5d","sha1":"da4c2b059dc3727eac3c8ec48a725a6a187e2b30","sha256":"4a981fa26f0de0893ae7b32db3040c69a425b69d13b2230a29fcb4bf275d37b4","sha512":"6fbfb25a000ce88abc391f973f090b920e7241f13255a9bb066a33103361d83f2c5f5ab7ba71d9dac4bebbc4546bee9018459d0b091cbbab207d54151e319eda","ssdeep":"192:pvf5q6Z8WpxGVacyfYwexo9+IT79F7cWjb6QEjAPURBXV52:pp9OWrCByplMIT737cW8jAaBXW","tlshash":"ad12af3b6ee845e0d4bd0ce7c4e8f2241135e6ac59bff2b808e6854c255500e71ea7a0","first_seen":"2026-09-25T05:44:41.705105Z","last_seen":"2026-09-25T05:44:42.605303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/17678951126/?random=63783556\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCNvcsQIIh9uxAgjTxbECCOvMsQII7c6xAgjVz7ECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIzeaxAgiO57ECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=ChCCsL4tyOy-Ldftvi2d6bc4\u0026fsk=ChAI8JTT1QYQ366klvnnoeUNEiwASmeOWrO5piU0zjuzAtcquvOkU83wSn0tIeZtqR0eDWLX8k7CqY1tnWmWxxoC3LA\u0026ipr=y\u0026pscrd=IhMIncjYjoOJlwMVrimiAx2Bzx27OhRodHRwczovL3JlZG90cGF5LnN0L0JXQ2hBSThKVFQxUVlRb1lLWm1ZSDcyLTE1RWkwQW9qR1FOUVlrMkVxZ3o5a2tqYkJ2VEdxQ1E2eUJPR2dmTkUxTHVYY05nUDhDVDltRnc5cUxUYUhvclpJegwICWIICAAQABgAIAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.877Z","timestamp":1790315003877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:25:08 GMT","end":"Thu, 03 Dec 2026 19:25:07 GMT"},"fingerprint":{"sha1":"FC:E7:07:88:73:73:DF:54:C0:46:86:13:F6:7A:96:CA:CF:F0:06:55","sha256":"3F:90:16:A5:E6:72:E1:7F:CE:8A:51:8E:F2:2B:59:12:4A:96:69:BF:B3:6E:9D:6B:E2:62:0C:5F:4E:71:BD:6C"}}},"request":{"raw":"GET /pagead/1p-conversion/17678951126/?random=63783556\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCNvcsQIIh9uxAgjTxbECCOvMsQII7c6xAgjVz7ECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIzeaxAgiO57ECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=ChCCsL4tyOy-Ldftvi2d6bc4\u0026fsk=ChAI8JTT1QYQ366klvnnoeUNEiwASmeOWrO5piU0zjuzAtcquvOkU83wSn0tIeZtqR0eDWLX8k7CqY1tnWmWxxoC3LA\u0026ipr=y\u0026pscrd=IhMIncjYjoOJlwMVrimiAx2Bzx27OhRodHRwczovL3JlZG90cGF5LnN0L0JXQ2hBSThKVFQxUVlRb1lLWm1ZSDcyLTE1RWkwQW9qR1FOUVlrMkVxZ3o5a2tqYkJ2VEdxQ1E2eUJPR2dmTkUxTHVYY05nUDhDVDltRnc5cUxUYUhvclpJegwICWIICAAQABgAIAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpay.st/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":613,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":1,"dns":1,"connect":15,"send":0,"wait":38,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/logo/logo-full.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.328Z","timestamp":1790315002328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/logo/logo-full.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2B3W6QA0u0LqoyHPpY7OP5IBTUtuulYxXWIomN1JabkeOBG3Guu8QjPzM77u3xylm3KwT0uFeTMbflRlOH3yR2pXVk2qn4floCfkpmtP5FxRhiA7m%2FIYLeeopiYwcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fc9d1bb1b8-OSL\r\ncontent-length: 2490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6216,"size_decoded":3280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ab99c4840b1633c4fca7815c66eb203","sha1":"8585c72644873c3d591250985056a428ea2ba41e","sha256":"d5dae02eff95a80fdb848fdb49f24da84537830995769bb73836048175bc9c86","sha512":"4ae8d4f969f9a0ea1eddeb0d4ef6862859b5b3e06637cdec67b0a712b849821b43ac111d3ad5636a06abc4c959d75e5b51c2eabb21ad76cdc3d9638da37bf252","ssdeep":"96:N110hZKzPvKP2ypcaCMyUwTOegyhD1jjV+iluXJVgoYL7pTbR:N/0aPS+y+aEUwTOegtsu5V0","tlshash":"f1d184ddb3de73d0e106f7d6df3610b5ab1f24f92e818aa8c285ad60b94448d9a49c80","first_seen":"2025-07-08T22:30:09.917089Z","last_seen":"2026-09-25T05:44:42.65095Z","times_seen":3,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/sg/logo.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.333Z","timestamp":1790315002333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/sg/logo.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJktZxJGTfFJQUFvxc10PjTQiHhNuaCsy9MYm1f6Gip7UuGUUdx8Ac9tZaJDYogr72kATjHWmGk1%2B6nsCTMJsoCjV0Q5ljGlubKHQvL4twJpodPpJXEdFaX0PDBIAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fc9d1eb1b8-OSL\r\ncontent-length: 2018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5426,"size_decoded":2806,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f85db25d9ddba285c790b09ab9dbd7f","sha1":"deea8591baf459f134f19bada50644ccbbe01e70","sha256":"3229f287019de5943a5f9c419c2515f6001370e20dde87c61b54f72a21d4fa9d","sha512":"363e44c0f51b336626173066a789ac4390d6f1a54c3450240381a63b0e26d1217532505fe40e6a1dfba27426d84258a19a1f9f8911ef0c65cdd1f5419169ab88","ssdeep":"96:GlSpS0QjReCELHN65LBuVjdjTTmf69dSLWJee1cSMuev20Bnlg2+NTg7sF14:PuVuVjdjTTmf69dS7vv20B2257sF14","tlshash":"e0b182da67e673f4d608f3d693325135720b39ee2b11da29c3daed6c780805e8584cc8","first_seen":"2025-07-08T22:30:09.92278Z","last_seen":"2026-09-25T05:44:42.590963Z","times_seen":3,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/mcdonald.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.341Z","timestamp":1790315002341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/mcdonald.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FSqlf%2Fti%2FO3zVbe5Dh6sNJYCzDgkO6YK7Pc0LsZVyvDvV8Dg2eySVpiv8nvXk%2FHoKhpumvAL8SkPHn2rgy7C4uB62oiz1C%2FLItyT40gtmiit5riWEIXQSrc57%2FY%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad22b1b8-OSL\r\ncontent-length: 276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":500,"size_decoded":1075,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"893214589a30734f6248d0d257841943","sha1":"0e1a8f60bf788fd79b27fd94030407cd2878d3c3","sha256":"b2d0dfa85529072cbb18e4c62648dd9e1ed0bb8666574f250d8505594e7f7b10","sha512":"43174fd4e36defd678d70f138d5166671ed6a49471a69ce1fb5776242b538d8e0bfd252c6da2a57f6193b92714c225efe0a086c8ef61a24ab90952a42d63bdb5","ssdeep":"","tlshash":"7ef00e9d8be567c0d952e320cb2045f332bf44f360ec81d6c6803808e4aac63b8902d2","first_seen":"2026-09-25T05:44:41.70999Z","last_seen":"2026-09-25T05:44:42.645917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-token.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.358Z","timestamp":1790315002358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-token.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dJUsuyQW5iDd1or%2Bq8KQTt4zQ4j56%2BS%2F6efDqSKbzFfw5KVABPnn%2F2pJALfgQh2kCn%2FQlQ%2BkuhMvwaxorm9ckFqtkJAY7dRYoVPOUETIkY9TF%2FoCRQMJAxLffE6Jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd33b1b8-OSL\r\ncontent-length: 1049\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2443,"size_decoded":1849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"199746090fc0b00093a92e1c56bfa8b9","sha1":"f1d065c835c7bee76d2a3afcf49ef6e745f77079","sha256":"0c0b34ee05ecf5ba36c78b0fe5005a815846d7c9b39c430c863cf136b016528c","sha512":"d7f62163f753ede7caa052f51f95297f2278fd263845d13b2661521309d85808e4215edc8d20cca1130024a14c3590e7062e7bae89f45e361e54d2ccfd29f902","ssdeep":"","tlshash":"ef5155dbe7e4f2e0c64bf3ec6659743b7a4720fa3742cd9d82d41fa9b60488d8905881","first_seen":"2026-09-25T05:44:41.712794Z","last_seen":"2026-09-25T05:44:42.603791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-airbnb.0OL_UN_Y.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.379Z","timestamp":1790315002379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-airbnb.0OL_UN_Y.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gG9Ff0osELE48WHnzrKZ9crbzub6UayT5pqXHwwvEXzuGW7fNjCFAG2ML%2BlhQNDo7u7Ty9J4%2BK3L%2BUi4UMtfrjxk95Xja%2BlXnKlMijNXA9gFhT1OS0tm0TX1ADwxwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced6eb1b8-OSL\r\ncontent-length: 11868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11868,"size_decoded":12614,"mime_type":"image/png","magic":"PNG image data, 246 x 246, 8-bit/color RGB, non-interlaced","md5":"1290cd2d0a65b8118bdb65161b73f71f","sha1":"83bc9606f0bf23cebe9fdb6c9958fe88c6fe0e69","sha256":"ba1892d6146b003c17f858ce61bc25c33d9bace3b8d81ef132131a7880521de1","sha512":"01c580399b841284cd389831f8a3a415c5a4f8adca27ed168e414a94f39e5722b90e2b5cf39aac3ee06bc6f0c43a690df464f924ad83b437d8f085cf2e09c931","ssdeep":"192:5kU9xbSM8MLiTEDRFzgyGpvqmv78bATF5M7CYpWlHKPa1451rZn0cejFWWF:iUnSM8MPDjzgytYLMOOWlM64z2cejx","tlshash":"7f32bf3246f1719159284b1a2978767cc4abab331ec713d3bc4f6d68473094581e87ee","first_seen":"2026-09-25T05:44:41.714565Z","last_seen":"2026-09-25T05:44:42.623675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-country-4.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.403Z","timestamp":1790315002403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-country-4.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7ldI00zKYVr2yHoK6x7dEcOM9aGT%2BJ%2Fb5r9%2BquUH1fWZ5leVzoDH598ZaWR%2BJgz446COi6I915yCUD1J2DURSzjzYxcuviW7Ie4D3YUrQSTpspBZ4B71YHp99K89w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d85b1b8-OSL\r\ncontent-length: 305\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":305,"size_decoded":1049,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"5cf9ffb18ecc0797c9bbed7a996d082a","sha1":"93ba7a0fdaa04d721a4480e3c894e17e777a7ee4","sha256":"e995240b8eb1a4afa1bd2c87b2eea4eae6221ca35faa13187673f063e04d34b9","sha512":"553af0fe98c399b47a9cd1883589714c9ff344b5f19bb032ee6bc325e0417c2e4c5bf0656317015f252a2d53a0b3b91193e1bbb8e4578a1ae9bc6a4fab4053b7","ssdeep":"","tlshash":"22e07dd6e301183ddd499a9b20d30394db3f04ab60680194c49160246479c88545afd3","first_seen":"2026-09-25T05:44:41.715797Z","last_seen":"2026-09-25T05:44:42.588741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"visitor.leadsourcing.co/n?tid=g2ANKnMiVmhWt9jsJAAF","fqdn":"visitor.leadsourcing.co","domain":"leadsourcing.co","tld":"co"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.339Z","timestamp":1790315003339,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /n?tid=g2ANKnMiVmhWt9jsJAAF HTTP/1.1\r\nHost: visitor.leadsourcing.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 503 \r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Frontend\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1790315004.583548,VS0,VE320\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 302\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-12.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.384Z","timestamp":1790315002384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-12.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjqR5d4mb%2B74JsK4b5%2BqJFCJ4IMw8LjXVWlD2%2BHPP%2FBZAdEwPqEldOuQfB3OTmkUW4zW%2FWuRYD2WwOWYVd5%2BuZANg40x5NVPl3lncZluYT14xn4kHcPixnrlzcB1og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced72b1b8-OSL\r\ncontent-length: 38579\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":51762,"size_decoded":39378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8271f4fe207d102f71d539c77adf11c2","sha1":"b930d20f44dce5179f16f3324b808f869b7b9d03","sha256":"982b5a681e63a25d0b8b593ad1a86712ca9c917bccd14501971aacd615c491d1","sha512":"7ca218899a28bb365357c6509e8d147e5a90e96e8b0e4ba1d858545a53a98d01d1555fdaf6b71702df0377b77f11b473d5f159fff29a0683ffd3f80d6d260064","ssdeep":"768:60Z/KFv/A72JW7E/J+3kxe2RyIgUaG1jQr5YERVnw9QO0d3qwmOKYPyKECQZYDeb:oFvDlPUBU7FSYEvnwh0NRmDYPXERZFk6","tlshash":"7633f1b9c57d6648573b21555000fe13af624ffb8802b1f9eb73371a5a026e32ed1a5c","first_seen":"2026-09-25T05:44:41.717282Z","last_seen":"2026-09-25T05:44:42.651697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/third-pic-1.DokRRZNd.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.960Z","timestamp":1790315002960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/third-pic-1.DokRRZNd.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ym%2FBFxUoa6xWVLBHZjPJjibkR%2FH3AVKePw7a2ryTZdLX%2FJ8%2FV5zDUKf2AnTM0pn8QjX%2BsQVb3ty%2FBZPBbHTOaXh2FxJsr7VADt1ZU%2FlEZ7Qc7pHlmnUZwvf58bkLNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6008e3cb1b8-OSL\r\ncontent-length: 29966\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29966,"size_decoded":30719,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b8fca112de424ac2c79e7f8df2165fb","sha1":"5137221c6d331de998559bc95f24e3c9f2580ec8","sha256":"b97453ca788c022d54fd72d161fc237da0a524c29314a828406406d631f935be","sha512":"bfbacc089e39a924858692efe275bf39ba9db76075fdb5615b2e34ebc6624b3bd681d1de7b3afb25564e48aec8b08741a7d7dd8fb89842d0927eaeb1e536d92e","ssdeep":"384:QB5nM1lnn/OHiRETSf7s4iHR9DMZvGwOBBon75ospcU4tDIEb95VYsZOkDFvdAir:bP2OETcsRKZ+dLon7fcfis9nYHiKZJM","tlshash":"a2d2e23f82332c70e71a36c9ea3c365a30cfcb4143a16b465859bb51248c9e7a5f059d","first_seen":"2026-09-25T05:44:41.718626Z","last_seen":"2026-09-25T05:44:42.553297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/fourth-bg-3.Djn4a1pD.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.972Z","timestamp":1790315002972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/fourth-bg-3.Djn4a1pD.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ub10nniDwHj3nUkXuIQPXgaVYNebq3EHQ6iZBnOevlIXGbrlfU4k%2BcE1CvbvHWf5K3XD5BUv%2F9gDsGIIKOihsvDTFOCGnkuGDOzPcMb6gmHJdJ51w8bsxeP2QAH8LQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e45b1b8-OSL\r\ncontent-length: 106796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":106796,"size_decoded":107540,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f4d2834ca3411d6120755b70f1e2fc4","sha1":"807361a8ad547cedceed934d76e7e59bebd126de","sha256":"f2b2a23bb0273cc27d0b6c87f4a416a68dc91678e64fd6dd1d6ffae5e20fa178","sha512":"0486f0ced8d3f438f82855d4dc19b5d05bafaa67318146a692e8e973242ae9b9ba4be013505e76f18e06f02ec609070b7a9c350c6c7657261e4c10381916efba","ssdeep":"1536:KnaVt/RxtaZGWLv/Q4mznuYQwOtyvJ2sNEKjpT62kO6rK0biamJxvm4jJ00wlRZo:TVCLv/cnFQwOI22kOP0OamO4UJZfWf","tlshash":"76a3125346a4c92c2c989ad361fdcedcc3ce6d84c3b4c6c4d1a986974af51ae793132d","first_seen":"2026-09-25T05:44:41.719987Z","last_seen":"2026-09-25T05:44:42.570269Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/amazon.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.369Z","timestamp":1790315002369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/amazon.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M1wqfbZBbTSyS6FxRM%2B4V6KXLsQaTxMDFZcwGS5c5qulHfBWkspp4a2qaY%2BCXyS6Oq1qnydlAyv06NxH96w1ilWQfhCLBhxOUewC2UMqquq6oGdAYeso19B%2BFFob4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd4db1b8-OSL\r\ncontent-length: 1267\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2815,"size_decoded":2059,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d34806fbae027bb6fe5dff60945eda1a","sha1":"93604f55de5106293e132d330287c301c737f8f1","sha256":"a87c9d6086cc20fe9cdbba6447f7717ce5b01b1ff6e90f31bc23843528f4204e","sha512":"f8d418f8ce526d7ff58a29cf61c12c85e0be522f8e2c97e1b86c65e5c416d129ea261028bd809420d05ff870377269acac4e86edd6b0929a035bf4b2156f5a12","ssdeep":"","tlshash":"8a515598e3d8f2d8f40ad3f0ea696476b65b34f9a729cf850668ae54e91114e49cc440","first_seen":"2026-09-25T05:44:41.721062Z","last_seen":"2026-09-25T05:44:42.639534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-13.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.385Z","timestamp":1790315002385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-13.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HS%2FX2ifcCcNXJkz7PleFpgXZBhbgpYGs39fm885tk2IsHI36yM8edm2gjBbCbbGZnV%2F3deRe9VpXSX0aTxhHy5jcog2317K8fC8RJBi5LBQYAblNidglblT15tu5vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced74b1b8-OSL\r\ncontent-length: 607\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1258,"size_decoded":1396,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cf3e1c05ecf77ba3cffd6b3653e1c30","sha1":"1e09ae8d3264501e02d78ded7a41c6fca4b5f7e2","sha256":"06664c6e63e8dacb142b688d6f5578c39d0ff61169bc36d6edd0bc9cfc454508","sha512":"ec4ebc25a3901e7c1558b336cb37f5e9cddfec131aa4d4a7293a9b94478a6b85f5fd2ef49ee29c77c15c4e83b90aedaf1241e93bf4089d0931baf5c2c291051e","ssdeep":"","tlshash":"4c2102db61c8b062f800134015ec347b71f722ff364ac90a69889b465e584bf8e9ab85","first_seen":"2026-09-25T05:44:41.722555Z","last_seen":"2026-09-25T05:44:42.576491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/_commonjsHelpers.BosuxZz1.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.751Z","timestamp":1790315002751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/_commonjsHelpers.BosuxZz1.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B24Ra9K%2Fjwwv2QmAbtQkJb7uueAy9xHpFTCgH4nggCRWcNcxTNtG1Rnrp2h%2Bj9Kwp%2F%2B4FZ0lAnqUeEVJDNLC3FiE%2B35DhQ9mdqdEL%2BWJQWX4KgEiO6PEyyEmRz26OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff3e08b1b8-OSL\r\ncontent-length: 398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":956,"size_decoded":1209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"591f7e34ec5a617401d7710a6c3804f6","sha1":"0a7059bc4caa4032361182ed11ca87ab0c6f05c1","sha256":"ab1fe62883aa6a5a1ca1fba022b82e55e11bc454eb3ea486ed0dc2af104a6e6e","sha512":"d2a9c1a6b0eabca6836e2448c42f56a4352ed7a7fef5b14c84c42e50efefb3fd3dc7e2ed58db0cdd42edf36437a046b9aec18bf6f2388f589f95141125f7bf40","ssdeep":"","tlshash":"84117685b9f1e1a041b3b4ac422b6801f1a40873449cee807f0c52f13fa103a4ab0bd6","first_seen":"2026-09-25T05:44:41.724091Z","last_seen":"2026-09-25T05:44:42.577696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-2.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.373Z","timestamp":1790315002373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-2.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnpWIPk%2F8wz1jb3tOdQktDr2TwmkLDw1l7GXbKc7hz549onLS5dwbU5Vo9wZEvw6mosythOLmeCQVGraqOY%2BTSh7FlsnmB%2BOHdxIYGZw9PRPm7xviu5Js0VCvJjsPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd67b1b8-OSL\r\ncontent-length: 1027\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2491,"size_decoded":1819,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e77caf1f165ce329b5fec9ee9931456","sha1":"61b311d00eb024e415b9983a5ed460abe5fbba3d","sha256":"fe1a8b95e66c6f1a834aed0a0e84c091106f0f1894fefd687da8e34710f4b6ce","sha512":"23b3cfb9d34e53538c07ff5a88d90a0daaa6167880aac5dc07f38f960769f590b084b0561133ace6c7992a5ac796a9236ed572d5b1abb88db3c024058b315a91","ssdeep":"","tlshash":"29513248f36cd9829e0aebf0571a34750bae69aa4732c52d4efdee70ee5642d94018c0","first_seen":"2026-09-25T05:44:41.725273Z","last_seen":"2026-09-25T05:44:42.633944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/tiktok.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.348Z","timestamp":1790315002348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/tiktok.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEjvGNE0uLS2pS%2Bzk5oxZzgvCiV48Skt75KikyU8PGVB3rwSLyV7mfamFXgwxraSVbo%2BoNihSdhWaip7pC81JCswMByzxGcDTN%2F4sWWORBlA29LpOuwwPFIBnPSbSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad29b1b8-OSL\r\ncontent-length: 2027\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5156,"size_decoded":2819,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81b1108b4ae9b06077857ee340c7f7ed","sha1":"a24a26b4ab73531ccf74eec8956fd4c7ff351d44","sha256":"b443430d6fe60f9fdfa6bee5a855c679919fc8a6606a0336978d7c763d2b027b","sha512":"f7389fe5335328e9553d6b8bcdcc1f4496da7c34b962614706127c64326d6ffc8df54d14afe61e6bccbeee4bed541809ded92bd76f4b39390ec249e74bf3a585","ssdeep":"48:fmn4xnif7t6GGO+frtz5gJDZHLmWL27BSSr24LImAmUflIvOlAONz8olFn91Oa7L:unwnw7cGCf95gfmWL7WUiUNLNJ9HiGrJ","tlshash":"42b194dc63b85af8f448e3fa472790783a536dc77842c469cb220d02b46689d1e64ddf","first_seen":"2026-09-25T05:44:41.726603Z","last_seen":"2026-09-25T05:44:42.635894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-uber.BNF7H7UR.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.381Z","timestamp":1790315002381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-uber.BNF7H7UR.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1PQEK7TLc247jgMzYooC1FFIA33JWB1anJXYq0eifg5%2FhnDlKBShdBkTdbFYDNv1Nf6wmSw4FJoA5td4r68GS2%2BuB8ChtPLrTlfRTeMEP2S2CmAsJFqrxgxbG1d%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced70b1b8-OSL\r\ncontent-length: 6526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6526,"size_decoded":7269,"mime_type":"image/png","magic":"PNG image data, 217 x 217, 8-bit/color RGBA, non-interlaced","md5":"f91505903482232928ff921aa90226c0","sha1":"bbd2a0643d4cdf33cbdcd14695aa8daf6e8f39f3","sha256":"c893d8695432f94c3df3da34ae51deee4b31588a6bbbad0a93507304f586b16d","sha512":"2c6e41893f0e92018e8842dc390ab3ac28fee8a13a543c2373b6a47cb3edbe65cfa2489a6143ddc07132f7a32092c218b368234f2dc8c6535ac73ff34fc85583","ssdeep":"96:SFLdkUtSfonE9jXq2a3Px8tXQSjmFBdDH6siOXhl8GyCx8LqGglkUOJVtlqgmLMD:YkUI22kOtXodlf8feoqgmO","tlshash":"6cd13c8e889588b1404314d1a9d89557bdab87cc2b82e4753cbcd53adf2c853e72191e","first_seen":"2026-09-25T05:44:41.72798Z","last_seen":"2026-09-25T05:44:42.632247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-country-5.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.404Z","timestamp":1790315002404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-country-5.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5h8FwzVE%2F1GLFE%2Byx711aeJiVkx7BXG3kuhYcaqUmH8ZGOeylM8zkqZTC06LPAj1GiiiFy4F0GNb0U9Jr1Ghk5Q0C7OZb1dO%2BgR1ikiFOXDyG5w%2FpM8EEK8gpDQjWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d86b1b8-OSL\r\ncontent-length: 595\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":595,"size_decoded":1339,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"10ea0eea32a1ac811b8c42d9d6b6855b","sha1":"c68caa3c9f986200790463d703951295d56ed750","sha256":"5dcb1bb58c92a536a8336db103941df00b80d3b673b0cf91e97c26b0028122e6","sha512":"b9fae058e04a92f5cfeabf69ac301ab0f785fb2af1af9cd40256d4cd4bca07d5e17ede6c9b94d00469d56b6b578fb4dc55aa8d6b32e8aa845779bed93ecebd75","ssdeep":"","tlshash":"e8f047810b97697cc51682de80d127c0526bcd5da8046e64fd2952b807518675566ff3","first_seen":"2026-09-25T05:44:41.729635Z","last_seen":"2026-09-25T05:44:42.594053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/axios.BjsyESAr.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.752Z","timestamp":1790315002752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/axios.BjsyESAr.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTZpqTWbAhTmhzPtWTECQs5BwdNJGHvJnXMU3z2TpA4MGbh7LCE%2FOqLiggu8oQ85Jrfv18drdn5sSwJtjtfZUEx3Cgip4YmeeP9rdumWBY5ekWNCO%2BtiNTBGS2B%2FoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff3e0ab1b8-OSL\r\ncontent-length: 16641\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":56166,"size_decoded":17446,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (371)","md5":"bdaadf4e35e1523a0a4b6624637fca25","sha1":"b964e024d8589555f10026b7ad07335917b90d61","sha256":"d451ff1a043b6f10e874186f613fe9b0dc9854fca1633c355e33fc2d357a69cb","sha512":"1bea157e7d7409d4e315e43cc66118d35f2cfa501dd52788bc7a83919be01870f2415967f416d5fb3421d0b2c3942c492e0b8c35d0ee0e9c00796c1a7c3600ed","ssdeep":"768:Gs6rozZ3qE8zi30MyNn6tgq+/eABpnNPVW2v3++rozT//dkKvy7OjvH7TbD6PAz+:Gs6ronHOn5eKBNPfv3+gozT/yK6y7C","tlshash":"4943724966f220364307f0794a5fc90ab329a50b2d8dec547e0c52a56f8953cdbf6fe8","first_seen":"2026-09-25T05:44:41.731388Z","last_seen":"2026-09-25T05:44:42.598574Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/assets/images/homeww/home-bg-1.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.952Z","timestamp":1790315002952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /assets/images/homeww/home-bg-1.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vx8J0PzwnvyGsOUJ306Sws0QtK7sYU%2B6l5hFXP7cUxMHvXSbo%2BqAyD204y%2FWBbVOxZZpdDqNwsxl0gR7R0pcGr3OmLjgRE4sAqAwQ0WqYXkcHbPPPsEj1soewPV5jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6007e34b1b8-OSL\r\ncontent-length: 72\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72,"size_decoded":814,"mime_type":"image/webp","magic":"ASCII text, with no line terminators","md5":"792c4e494c98c486b57ee6cbcc0d66ca","sha1":"5f24dc4b4ea147bba48b7f0579bf47dd641d2850","sha256":"a98f22130bfb21fbdcaf39df36c963ec1bd93c7193fd9bb83753cbfa4e490ef2","sha512":"66f3c37cfed0adf21494e6108e6aa45bd20e1244d12257e3bbc765ef44e95a17b37dfffc4df480b3468a5567a3354d5e15d385adac45276b202b4943cf16a9f3","ssdeep":"","tlshash":"c3a024d30311f4511f00505014f53154d513004415c0d344101c1c5c10c040f0014c54","first_seen":"2026-09-25T05:44:41.733811Z","last_seen":"2026-09-25T05:44:42.641254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/third-pic-5.C6sJJsJI.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.967Z","timestamp":1790315002967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/third-pic-5.C6sJJsJI.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soM4MFjxg%2B5grHrbIG9do1CueNe7Re9Mj2QMUlrmM%2BGgsG7Ni21MY7iQ9r1eFFo7yJt2LJ5Sld1h0h9ESWsCGksu6dcgtQDYVp%2BpqRHZ4MZx0LZl0gQqNkzBd%2Bxtqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6008e40b1b8-OSL\r\ncontent-length: 24266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24266,"size_decoded":25013,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41a3c11899d3cad162edcec714927962","sha1":"fad7be7da68bb9674d574f577753f3079cbf0592","sha256":"011e961d76511da79b1af656857c37f57a32fbe9280d6c825c1430e8e1a6c2de","sha512":"5a9f092ca28964aba80aa8792e049b53bebc5789005414cc0c4ff1eb415a05209880ff8b6c747ba6293882ab858e2078abfe6590183d6c601cfc1b37e1cd2dcd","ssdeep":"384:OYNg7BYNg7BYNg7SaTVjz90kY4xM17A8/dz2+rHLYWoSTpFmij2GpM:OYytYytYyeaxX9w4ajrHLYFIq","tlshash":"4fb2cf3d3e57a6d2ec36d638eee15bd102f31524f374658890748629c2a31466bce1af","first_seen":"2026-09-25T05:44:41.734978Z","last_seen":"2026-09-25T05:44:42.618471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/index.COHxXKR8.css","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.291Z","timestamp":1790315002291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/index.COHxXKR8.css HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYj2OI7FZ9cBswkcDn0Rti6OhFcICNf0kLFQfZIUP5gjXjn4y4fTS2SLRb2MpEfFszsH6ZaC4C1%2BSw3lhk88Ygg2V7taFl88AIYHhF3oFnd8moaV7V6VQK9ZqmL7TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a407b5fc5d0cb1b8-OSL\r\ncontent-length: 3390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19548,"size_decoded":4176,"mime_type":"text/css","magic":"ASCII text","md5":"eda11a297b76d86a29fb64d8b2d64eb2","sha1":"cc3a290d28c98388b1d19b7ae00d4048d4548b3c","sha256":"59c10fa7db7c2d80a0cc51e1c24f2bf3e572be599cfbd6de7535fce002951156","sha512":"e84cc2789a5ea408806dbda1c92e0cc7fd42723f72106dd726848fbf5685d0f45806d049e2c987bd15626f6f1e293bbfa19550eadc984bdf6d723cd446d529db","ssdeep":"192:ID01hbH5EwFC2WjLot5/TeaPV2gYACq5MwswufJnQvggVjgVUekgVF3xblKaW7Rm:6eV0VTVWEFQFEcUTvEFQF7Zyg3IK","tlshash":"ee923455bbf3184de00b956829f9127862249453df1bcdaa7a8dbee8cf471acc076f40","first_seen":"2026-09-25T05:44:41.736945Z","last_seen":"2026-09-25T05:44:42.578878Z","times_seen":2,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/paypal.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.346Z","timestamp":1790315002346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/paypal.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQSdrajfAWPblepiBD%2BfpqvntQsCmwRHGpmyo8Xjaw7NhliRI%2BXxwD5Fz80%2B2o9aqBI1ryST16%2F6YfemYQh%2FKZ4nnrjiPZcDLNwvQfEqwCDWuytGY3S1lBhxwKhCWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad27b1b8-OSL\r\ncontent-length: 2546\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6850,"size_decoded":3342,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db87ee16b463de53006ea2fe50d34206","sha1":"3eedae4e169841172f9046e6581f677ed32d89b1","sha256":"b599672cfa11ebfb5ff07bf46aa4298bd7296d89b6fdc3428a68d99e2b777a3e","sha512":"7fc5ce8f3e400fd2aa4d452504e4094fd9b2d2f02e2bae589ede2df40e10e985d3b3c20edb22e9e4ce8b0c90bc6d09a2d230f943e117f59746ee8549e746ad50","ssdeep":"96:RP9wgp2ZkuX9OBiGjmeXb5Pas+C6PV8bLn0qCC0P9wgEHP9y7S29FlJ:fR8PKmergvV8bsi8","tlshash":"7ce1a4c83bba42ecf041f7facb1120747986d8c8a94185b6d7981d5ba8cd06c0ee6cd3","first_seen":"2026-06-08T03:39:50.386116Z","last_seen":"2026-09-25T05:44:42.615873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-17.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.391Z","timestamp":1790315002391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-17.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2vOl5SGY1QIQ8dXKP1G%2Fusnc6cRmHS8M10neGDO0Be1nGx0MWHShmE6nsEUPNV0WBlB6BhgAQEA%2F1upoBi3ZnEK1YZ7ucbp%2Bf%2BoS7bm%2B%2FDAKSnoZXg5Hz8XPrwdyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd79b1b8-OSL\r\ncontent-length: 578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1502,"size_decoded":1375,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf10cc0192530eb49c8264ba08e65eb8","sha1":"32b15c066884431b2903c3f24e676644cf571acc","sha256":"92a9521aa18391417be273b05f8b1ac7500a00c8daaa810b426ac97210b0e0d2","sha512":"9f5e1fe44224616f2e86d12bc32141b86de2b78a58e21ca3c5e3a534a0a772728c8a02d458863e9e2e4187b91e7455841dcf1f2dd64985ba9a4fbc298aa39439","ssdeep":"","tlshash":"2b312ed6e3c0f380c50557394152b45a3b6f3cbb478bc42de388a955892822f5ccd1eb","first_seen":"2026-09-25T05:44:41.739807Z","last_seen":"2026-09-25T05:44:42.640386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/social.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.396Z","timestamp":1790315002396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/social.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9SG%2BLr1ybNXkoZFaVSiPK7etZauhzRqKXfp5RL629OmC%2BXwxmu%2BQdnh4itEhb4HWlOr%2F3mNzFly84ijNYuDr1c5tCdhGkyf14sBsFJTh0VuRw%2BS75xneIqxFshv3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd7fb1b8-OSL\r\ncontent-length: 559\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1132,"size_decoded":1354,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bb6fc5e6f4f71793cd1118ab4b2264b","sha1":"61f8bdb1e7d0025cd6663045ade6dbd239a3ef86","sha256":"7199dfbdd1178398540cedee1ee92657c91dfec97490c8c28ca86bf318b0231c","sha512":"93bc1c375423c26c6add311ffe8b9e5872076f3a8321a12c8735cdff9458adac8491a72484fcf5373c249cbff18a3d6ef82bf745d27dcab1db10b5dbc02e080c","ssdeep":"","tlshash":"f52100e493cce2e5950e97e01575892caa3a78fc614ecf58e398aa91db950cc98d4e40","first_seen":"2026-09-25T05:44:41.741001Z","last_seen":"2026-09-25T05:44:42.657513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/seventh-bg.BJnRupU1.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.982Z","timestamp":1790315002982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/seventh-bg.BJnRupU1.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CId8fXJqVGv5SzmrJ2hNI24dB5vQUeG8IZ1ek0HcdkgqS7Az3Vlqf0Wv68rpF3m7TWnFa68MddSXMDcH0Wqpaia2%2FYbpXWj0XTZBkyQR5Q9AE5WisZfW%2Fdx2gmBq%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b600ae50b1b8-OSL\r\ncontent-length: 19120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19120,"size_decoded":19865,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0eb3a705e38df25fb277ac31ac2fcde7","sha1":"92e017f72038b43433ca435e481dd18e8771f439","sha256":"47304d98154cedd6f45acbe1cd4a00e1375dcba751fe7c89151d0ca635cacd70","sha512":"c5e7c06867ee9b1c17a38d63ec584babab6f653c2b5cef325bdc974db06ddd8f0155afee06b419d973d2273a0699496c570bd641633addbbc0f5180da1435089","ssdeep":"384:/55r9PvG0nmOd56vyML7BOCkFHsyKpoK+GLYJUmkwMe4dffNswOQ7ipp:XdB5d56vfLICkJsyqV+GLYGG4f1sOipp","tlshash":"b482d0235c89f418bc30fb7cb7665c62ae1e7ba1a4eb0453a82cfcb569f441e647211c","first_seen":"2026-09-25T05:44:41.74346Z","last_seen":"2026-09-25T05:44:42.623044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17678951126/?random=1790315003107\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.116Z","timestamp":1790315003116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"POST /pagead/1p-conversion/17678951126/?random=1790315003107\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpay.st/\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/17678951126/?random=63783556\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCNvcsQIIh9uxAgjTxbECCOvMsQII7c6xAgjVz7ECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIzeaxAgiO57ECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=ChCCsL4tyOy-Ldftvi2d6bc4\u0026fsk=ChAI8JTT1QYQ366klvnnoeUNEiwASmeOWrO5piU0zjuzAtcquvOkU83wSn0tIeZtqR0eDWLX8k7CqY1tnWmWxxoC3LA\u0026pscrd=IhMIncjYjoOJlwMVrimiAx2Bzx27OhRodHRwczovL3JlZG90cGF5LnN0L0JXQ2hBSThKVFQxUVlRb1lLWm1ZSDcyLTE1RWkwQW9qR1FOUVlrMkVxZ3o5a2tqYkJ2VEdxQ1E2eUJPR2dmTkUxTHVYY05nUDhDVDltRnc5cUxUYUhvclpJegwICWIICAAQABgAIAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":6,"connect":27,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?l=dataLayer\u0026id=G-P5XEP5TK6B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:24.080Z","timestamp":1790315004080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?l=dataLayer\u0026id=G-P5XEP5TK6B HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 05:43:24 GMT\r\nexpires: Fri, 25 Sep 2026 05:43:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158936\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459266,"size_decoded":159520,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"2741297affc560de091fcdabb685bbe1","sha1":"48bdedcbf2ed0f6312333d78241c87042331c167","sha256":"6d7e94f7348e55e16d2ee767fb60e95000537e6be9764d9900c714be2d64e1ea","sha512":"fffe9717f559018df958482de139facb977ee012ad6d4a34cd41a1e9bc417bf74ac795eaa8aba8b881e81de1bd2ae99830efceb47b2dc1a9cb69a08a54e29304","ssdeep":"6144:MScM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9Hy8avOJ+jxHR4J1g:yp7+//0hBPtRJez","tlshash":"85a42acdb3c674229392f578903f018bb67a69a2b44cc899f28adce42d3455a5173f7c","first_seen":"2026-09-25T05:44:41.744763Z","last_seen":"2026-09-25T05:44:42.596936Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/amazon.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.347Z","timestamp":1790315002347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/amazon.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0a%2B36UDTEg6hO9%2FLk9%2BUdx3x4BrcYnhoIb1mzOwTcjmhAX3c6e3JRE1881wFF8AY%2BAOCVoApODwLG2kjqSvU2NiWdTxZCWnZiwqgWQaHJBqQfDLmXYWqU%2BPsq%2FA1FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad28b1b8-OSL\r\ncontent-length: 1773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4284,"size_decoded":2571,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a83e65cdc2c1cf222c8f6533fdd263b9","sha1":"2be8e4f90cd6951b5a79d0d17ef724b78293599d","sha256":"e8bf2052858b9c341b2cdf718b6d2d3ecd13795f15a37dc13a16b5ab8399b1e3","sha512":"831dff5e038bd306b0c5df41127053d10f56b80ea3ee37983b70375b63e3765cb921e9a0bd5aae4c29947f08a47b829182cf9a786cac57b605eb6bdfdba27cbb","ssdeep":"96:YrWjzzjVBn1F3kr98g64X3crIlJHVr/yKte3+oZIib1Ad8:AWjnjznKpXPJHVrxtG+oZDb1v","tlshash":"0d91b5d8bfb091bdf444bafd870640792e99a8e778a0c26ce7fa6c6b559105c9c41cc3","first_seen":"2026-09-25T05:44:41.745777Z","last_seen":"2026-09-25T05:44:42.565013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-usdt.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.357Z","timestamp":1790315002357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-usdt.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhZ79Wggl5JgUn9RTlGm3c0No5ebk2laLc18SUydrZFUinWR09Qh5cdpmzmG8fjpt6yRrlaB%2B1wcMYfVzxlJjl8IwRQAxBrtR6fPBTEO%2FEc0BLSPat78jKrJQnaUMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd32b1b8-OSL\r\ncontent-length: 639\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":1428,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3a0704e1d7b0fafd39e67b4335ebf0e","sha1":"81aa8a1f383971502a724c089a5fa40223f151fb","sha256":"bc8b2a63bd3322af8f038e9bb2fb385335b7fc9f6fd1de8cd6a132a375097ab7","sha512":"829d5e092c3994604bd71b0973eaa1c05598201134b26eafd188be5a47e223662198607ba0eca7707835331adc8763f290d35a15e46d82c77bdf9c52a18ecce2","ssdeep":"","tlshash":"f821f168d3ba493c2c87036c4664645135b2a403a22cd7dcfa9f7c43af05ef1166176c","first_seen":"2026-09-25T05:44:41.747394Z","last_seen":"2026-09-25T05:44:42.600454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/third-icon-2.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.366Z","timestamp":1790315002366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/third-icon-2.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12quWkpD%2BMSA%2Bi2NluM%2FnIrlp0CdYZMwsDFpyX4a663JDfathd3lYn26HYlQlIpJIeMrQ9v8AQYItjBq0hKNZv8s8x%2FsxnpWhzHp16C2P5%2B8QMIJ1qXl07EonI4TzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd46b1b8-OSL\r\ncontent-length: 654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":1449,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4babe360d75ac9260e0ea923c783619","sha1":"067750c570a941f85b8edb57769252962cdd76e1","sha256":"fbb14cf50a2668ea76f8e942e6497166036f66210bca29d205a3033be7957943","sha512":"057d1136a0af58f704526ab3dd6585e53e72264e148e814e0a0695c02a0953b925b39c9807032b685047db06fc9ef297978a20a9edec1a39d058dc036d89d6f5","ssdeep":"","tlshash":"98213ef6938986ded685db71d5231ce2250834f4abcea0d893205b7cb72c2e14d81e4d","first_seen":"2026-09-25T05:44:41.748743Z","last_seen":"2026-09-25T05:44:42.588101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-ubereats.BrMPxdUG.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.376Z","timestamp":1790315002376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-ubereats.BrMPxdUG.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=97EuduliLirUeKGQeUrJmkbpSv9xw4DyIsZBNZCVsfmeGwgZWWTWxzI3sCE8aRNf4ue6XjytO4Lh%2BLJks5YFt5mB%2F%2FGjnITNE1XDoMUfkYgE2Twn7FBr1TMnOKzjiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd6ab1b8-OSL\r\ncontent-length: 10432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10432,"size_decoded":11176,"mime_type":"image/png","magic":"PNG image data, 217 x 217, 8-bit/color RGB, non-interlaced","md5":"a21b9f88ea148ae78614f9aa63603c7f","sha1":"fe85de5920bbbffd99e66ebddc7f6f273f871a65","sha256":"8738092ff8ec6d1cc9023b21c0431a98d5573934fc65c3c59aecdc3be26fcb6b","sha512":"a4c6308b1b860c1159bf10849398077f0baa01a808a0a1fa736ca5ffb59417ad68e19b497a98c2e25a5bf258a19371562ef245ce629bed2e83bff988b55a2a1d","ssdeep":"192:NkUklEzMKLa104CdrfPxhuqf+G0ygsYqenfp6eImjClS8f3FEaRnLnK:uUkl7+OIrfP7v0ygxXnfp6xmB8f3FLR2","tlshash":"8422bf607ab060a3c4316d9221c65b88df4f978d4d01c71bfe8d49bfc7923d96ac1ad2","first_seen":"2026-09-25T05:44:41.74982Z","last_seen":"2026-09-25T05:44:42.579491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-blizzard.CJSUxsyk.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.382Z","timestamp":1790315002382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-blizzard.CJSUxsyk.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo1q7Y%2F5hdfzkOO2S%2FfAhXyfoBzk1djgzW51c%2BP%2BAAnIzgxClBciLqNyVpIgQTLAWqCwU5lCezbOYK1%2FCL%2BP4ajz26ZTM12HvGYcGPnxjHE9kNXSHlOAOrIXsUdfxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced71b1b8-OSL\r\ncontent-length: 5338\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5338,"size_decoded":6087,"mime_type":"image/png","magic":"PNG image data, 152 x 79, 8-bit colormap, non-interlaced","md5":"a505a2b703959aae3487bbb3f14fb5c8","sha1":"561ace4257a028f2a6c29d7d8e3dbceb4a65b2be","sha256":"9f7ba8034bfa54829ff6130dd038c503ae21a1b9e5fc37641ad2c3df8cd3644f","sha512":"fc91c66b68bb4ae03a8de24897322c606bee1944b46cc1afadcf1668ac95b18b4cccc7ae7e0d2d272b8bfa98fa881163ae2357022f580056c72888ce5ebc7234","ssdeep":"96:4Bf33Pf3ff33Pf3fjP6pfIRfEKpA9lY/HWS17PZS4aMnLjg4TU1h91cNA:4BnnnTyVuZWl+RZPSYuhcm","tlshash":"94b17ce7e98848fd0ad949bc1aac4f14a537636412c319ef4b99806d1ee30cd4b2c697","first_seen":"2026-06-24T22:12:39.893512Z","last_seen":"2026-09-25T05:44:42.609618Z","times_seen":6,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-country-3.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.401Z","timestamp":1790315002401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-country-3.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RkE1CPbh2gSn4Iet%2FAhev5Ky889zh1L3tUfUCnWeQycAaSb6tvsZjNLqAP4L3jD4W5x84XVVZLaLqwsDW6SH6zoTCCzVIPsgMxzzQ%2FqXK6%2FldTJK10tNqfr8l3qyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d84b1b8-OSL\r\ncontent-length: 2097\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2097,"size_decoded":2840,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"dd8bd7b0788cb04eaaf49b91ca08989f","sha1":"40e592bf722f39ac3253d96bc08fbe09179781c4","sha256":"b29efc4c44b5c7f8498b46c3cef0eeeaed3430e5a3f79a73669db3bd8cb676a2","sha512":"76c3606297890cc1916a35d3493a6ccb0da142626dcf63349178c5e2464da4e032f2a91bf56c2d2f2dde54d912b3aa584f896495dfe36eac57d60d792505bdeb","ssdeep":"","tlshash":"c1413a1aba84d93b4ca4f27105b3c5cca135b4cb1299b87ee9555361b012358cb0afc7","first_seen":"2026-09-25T05:44:41.752589Z","last_seen":"2026-09-25T05:44:42.593515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/TransferModul.astro_astro_type_script_index_0_lang.DPA5r7JQ.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.746Z","timestamp":1790315002746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/TransferModul.astro_astro_type_script_index_0_lang.DPA5r7JQ.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2LAFUMzofq87AxVwN7ZSzW%2FesveWnSBqo7MrElJPeBSkDjpl2Yh0eI85zGWT7cykv9BK9pr%2FuYaOLAie60%2FYVaLWjmhmzELGuqB3GgImpvbfimGI9BZpJQRpZS5KwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2e01b1b8-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1666,"size_decoded":1147,"mime_type":"application/javascript","magic":"ASCII text","md5":"c3c7edc15d28c18fa835297125388bdf","sha1":"4deddee20d15a7e2e2780f190045f88da6b731cf","sha256":"d6dedbb09a7619708f5b741f5c1b80b1d833b59888a803630dc9cb61ea94b537","sha512":"1f7f32c76b14048bc4fc336f34756fbbead756ba7b733c5fc6d786ac4dedfc9e8a41d8f76845ef1c7d4104ddcedb3615bb50f7b0525bf0bfde4f695d8774bad7","ssdeep":"","tlshash":"2231612a36a0483e025f34e4555bcb84283100bb9e9b1ab7346ce95d0f4a8f6d3723d9","first_seen":"2026-09-25T05:44:41.75373Z","last_seen":"2026-09-25T05:44:42.595691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/index.DqNwwtWe.css","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.294Z","timestamp":1790315002294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/index.DqNwwtWe.css HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OFhpBEv2eGbvmvLk9B%2FK4G8FTm8xBc3jsAvjqAbJ2LrWV3EZb78TJAMyNm7uTrEJVsU3GotBevqGYIW76%2FbOVlKwaxBvMYlF4r3U2eh46j%2By7qOmVY10r%2BtWmj4XQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a407b5fc5d0fb1b8-OSL\r\ncontent-length: 1162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5417,"size_decoded":1954,"mime_type":"text/css","magic":"ASCII text","md5":"e2e918ac0d5e0ed36ae3d43b0e8954a1","sha1":"ee9afd9dd345b5af26c271950791a033a9bf0bd0","sha256":"212103b111bf7cd29c292aacce3e69152bdf68773b1379de48c61cd79dcee5c6","sha512":"e0641a0ab5c8b7e1c930624ba24220cfe02535e525042715cb469f5a98f0facc9e7cae538ababf3c257f4ce9c7822b16f1e61e6d70817260950f33d1877f2f2b","ssdeep":"96:clVv3GpfgmBC/s8y0HNYDUndSd3PZHZFb3aHPEKP3sPlYwrs7TWwvTwbwoFQwjZe:6u3BsJy0HNYDUndSd3PZ593aHPtfstDc","tlshash":"53b1ef957ab32d8fb21b80501bf8572812289003d756cdbe7b9dfabc4f821998076bc5","first_seen":"2026-09-25T05:44:41.754796Z","last_seen":"2026-09-25T05:44:42.587552Z","times_seen":2,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/icons/safe.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.367Z","timestamp":1790315002367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/icons/safe.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjQUuDgoFAggOlOEzrKhmcSUmIiakr4vZPMgEm49pao6tJBMADGIadoaU0A14TsrSO%2F7sGJgwvK%2FNG32xjt09XOUk%2BTdEpTxkZl0oDTgkK1UYNmLVM5%2BfNzdNX0PpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd47b1b8-OSL\r\ncontent-length: 973\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2318,"size_decoded":1766,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e910e7aaa4dd05bd60b8f942c6dbb9a","sha1":"5e31ca57a20487b800668b05d83f798bced0f47a","sha256":"b63acddb1efd6f1558ea0d3fa3864d66e335e8323466b0b2fe03d10f44a9a85a","sha512":"d4e080ca950c04264c7035bd3555c456f8ab71940324afc3081e043fc6da65e635192a4711501745e6dd1caefda8cf8f217931a4ee25d5d1a7163762fa64800b","ssdeep":"","tlshash":"d441eeff73d8d0d58b47e760db232d18641d3cb62bce82e20554c5e4e466eb0896ad44","first_seen":"2026-09-25T05:44:41.756608Z","last_seen":"2026-09-25T05:44:42.564336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/eBay.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.370Z","timestamp":1790315002370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/eBay.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AdN6tjJKFWvto0bQq%2F6wGku4YFJDHWU8SUbwKxKfpAZgoIv0nJIGkx%2B5HGEnC0QXm6Zsq2ma%2BDW2Ix1eMBeiYmbjsZkiF5wCVDuFM%2F7Ho4psMPysPIfXZovA0YWtOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd62b1b8-OSL\r\ncontent-length: 1368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3121,"size_decoded":2162,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d0327462ff2f0197b08258e59b109c2","sha1":"9777aa857408cd0792f9a19cc52ddef25dfd5121","sha256":"f6e7831ec26c77b89f394fa0683f34c8be5e34ffca469988c225f9d84c28fd1a","sha512":"715257225ada225ad9e98fb5655ac95e227961ab4066443b03c2c93dddbf1fba959bd97db4a9e5f205c4f6cb9680e2085179d37284a348cf2dac39a175ce9112","ssdeep":"","tlshash":"165121e7d69872e4e447f785c446503176a730fb3b5acf499780aee5b71441a49cccd0","first_seen":"2026-09-25T05:44:41.757737Z","last_seen":"2026-09-25T05:44:42.599826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BBT_gXEc.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.749Z","timestamp":1790315002749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/hoisted.BBT_gXEc.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoK3m8HV0hjq%2FFy%2FAsLut0Vpji%2BOJEdXcxJnWvjTmTgv9Vl%2FAZP1mX91X%2FfYg%2Bq1ALnf7taYu1WBHjPKljH4yFM2QJnYKf5gdVyYEpibla%2BAr3dBzW4uFJGt0rid4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2e04b1b8-OSL\r\ncontent-length: 248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":445,"size_decoded":1059,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1a7294d28dba5e847762198ac2aefb46","sha1":"bb8aadb18ad912e0bb3c22bb2582a6c96b52cb44","sha256":"ac3583f98e6f60fb2e58f5d008c366600c80ab9596c3c9b48673eca5ec1bfd7f","sha512":"4ffb42b17cebfe3a263203dbbe02a2fadaed29d9483ad1868e32195c27410869753f7cf19384dff187598a2d5befdeac06421aff89a54fda757202fa40b49a16","ssdeep":"","tlshash":"91f05c9241d1461a115664e58d6f77143a3211ba1b58a001250d5312ff3596bd617ccb","first_seen":"2026-09-25T05:44:41.759Z","last_seen":"2026-09-25T05:44:42.581244Z","times_seen":2,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/utils.1aMEfqki.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.750Z","timestamp":1790315002750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/utils.1aMEfqki.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxR0cw4Vmo4N2uRgkz0NB%2FqwFPJ7R2bI%2FQLY9J4Km8tR0Ci4OK3DKlZ2%2F7nnFKyWT28vV%2FJN2Il1uVCZmWrV8YqHyWtIaw%2BksL4q44vlOhHf%2Fwda0B6QbIn%2Fq2S4Wg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff3e05b1b8-OSL\r\ncontent-length: 21750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83174,"size_decoded":22563,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"695afb5a20a205df6637357aa499c73b","sha1":"587d73560800a40d3d6b7133db34ec37d1d588de","sha256":"27c9b1081f14d255ee5b561bc3fa37b31f3122fbcea36d79a67ded2deb6c6923","sha512":"9ca92571cd42cb7177b7f5dd14fd92637c288e79154b78fe693aa829e90a11f8b1f12a2159807d50c113883e85460fc0d3a7a23cc1c54d099224062abd196c9b","ssdeep":"1536:JGLP+KjXRw44NoPpGlOHAAcu7dE+M88Hc2t1Cxr+t:kr+KjXuOG0g+7dR38Hc2t15","tlshash":"3c83328667d27931922be1390d2fcc09b669581b598ede09750c81e92f1cc3d93f9ef8","first_seen":"2026-09-25T05:44:41.760329Z","last_seen":"2026-09-25T05:44:42.637839Z","times_seen":2,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/home-bg-2.eoD0E1Ce.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.950Z","timestamp":1790315002950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/home-bg-2.eoD0E1Ce.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGNTYMPbl5brboYcj3i6uT3XpVL%2FPSkRBOuL4Hh6ke1kAHvm%2B8d44jK%2BThcyx%2FC8qFfCcNtv7YivPyrBD3GEjeLopJClrjEHTrdVst18G9rV8d%2BW4Q5bLuF78BQ1EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6007e33b1b8-OSL\r\ncontent-length: 69122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":69122,"size_decoded":69871,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb575e3976eec930a5cccf95ee5f8c8b","sha1":"50708aa4241040d7d8507c1dffdee69bf7d04c7e","sha256":"5cc7039c46b1dff0e153ce628db47cc011bdfe3b97d069ba3d8d5e5d5d939e9d","sha512":"6199083740aaeee9e3dc8128bc967986e3c17b1a0379f873c34b54a9f1ac6dede84f101bc25f6361c5a2959b405a7a611aee009a3f90d372f643e2525439b037","ssdeep":"1536:2JJKmfPrbLU0hY61WmFhj0MMCp4pBVLE8U3:2JJRPVZ10f2wBVwL","tlshash":"4f630137ef6a5a29edc7c53cbcf4eb5c40d64ac4bf340d989e767050588d2126b4a0a7","first_seen":"2026-09-25T05:44:41.761583Z","last_seen":"2026-09-25T05:44:42.614117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/icons/arrow-right.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.329Z","timestamp":1790315002329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/icons/arrow-right.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uuUiuDfxpPVKEnfEqypwUE90K1bQWU3ciA4rdOJ85%2BvfKY70rJ%2FV3%2Bv1Rftz72GzW4Ijczl9gE%2BuG9t66aqqfUxBJtQFIy1C773ugU6P%2B3dbkbZFNL095cgSKbGZzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fc9d1db1b8-OSL\r\ncontent-length: 867\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":867,"size_decoded":1613,"mime_type":"image/png","magic":"PNG image data, 51 x 39, 8-bit/color RGBA, non-interlaced","md5":"c5f3f2dc8cc7741b906bcefbfb2c17a6","sha1":"a8167bd8590b79d9aeda432dff145007bfb81792","sha256":"fc9c6f653c16944adb80c1e83a3b52db6b58244908c6bb14c3acc0765fdf4ed5","sha512":"9b090aa3323f14a87ec2f05576b85ed2b9edcc35f5e04b4acccc6ac2773c0fefbce8ddbe456c67de0d63f5e8ef005d25da39492238e675462a5f5eb0843964f1","ssdeep":"","tlshash":"0911963d1026f02e7877113e0bb14090ff2b4a19a9012a9d05cba9305a109a8dd84be2","first_seen":"2025-07-08T22:30:09.929341Z","last_seen":"2026-09-25T05:44:42.55261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/kfc.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.352Z","timestamp":1790315002352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/kfc.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7FQ9ooBuedBwoqOV70cAJdDX2OPS6fdYTnpocWp4SCmmZBXTXIv0Lfl%2F2blp5SNqbCQHOb7Vfo4uflUthkOX8lSQJLv2DWwmKgw6pHJJOyNDbfBKOXhlqhTJV3I0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd2cb1b8-OSL\r\ncontent-length: 1062\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2211,"size_decoded":1850,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d65cc01a2bc87abdd9813d558c2d83b","sha1":"5235a2c8268b9267e1116bf3a0293cff2194415d","sha256":"e863f5a40af6e6add52a046cf413638eeafec97ee6d7476995a2eee2b671010f","sha512":"43001323b3ab47b0381492fe82659d6c7d7568a69fe23fa85019d7c75df407b1d05c8f1c3c9dc9a27f04e0b1fd1f591359ee720799eeaff737e4f94950c6e40d","ssdeep":"","tlshash":"874173d967a3db60f444a3fd9e436af99e0729f92f634078cea51c45f55280c2a042e3","first_seen":"2026-09-25T05:44:41.764287Z","last_seen":"2026-09-25T05:44:42.565852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/chainalysis.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.408Z","timestamp":1790315002408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/chainalysis.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bjw%2BBpppDppudklI%2B73wGPmx3aGaxKzHLGphQrBmB5UiMP8UJiNS9n4LfM%2FAW1Ae1ThoXjrPz1ml%2BULgmu9V%2F1DaTiuCsZoKT4grLj2xOWSyBFe%2FlsjT7ZXMCo1R7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d8ab1b8-OSL\r\ncontent-length: 9295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9295,"size_decoded":10046,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"ac06879cae9da92f283c687069d0e687","sha1":"1d172618fa57d30ceb63a8602fb1504ee0112d91","sha256":"acfd1dba4551733d58be8f3eaa1699654800a88fc037a178420af40c250cd61e","sha512":"a9340440b04d3ef3f0fe51180c81c2523431bd4176fdbf53033aa8dd26eba9ab9b1bc205d941aacd5d3f529519281ff20c3c28cc2f0e00221cb7ec938fd72f7a","ssdeep":"192:s16xYj6Y+YJWit45IqBFWmFBy3vhbpe4dfwG6LB/aSDrYYyc:xWj63YV4LjQ/x8YSVC84c","tlshash":"6612af821fbce96c0c61cadcbda68c770d241416de3e5cf4dfd0582ba455c5c6cd195a","first_seen":"2026-09-25T05:44:41.770845Z","last_seen":"2026-09-25T05:44:42.606516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-P5XEP5TK6B\u0026cx=c\u0026gtm=4e69n1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:24.086Z","timestamp":1790315004086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-P5XEP5TK6B\u0026cx=c\u0026gtm=4e69n1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 05:43:24 GMT\r\nexpires: Fri, 25 Sep 2026 05:43:24 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158943\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459277,"size_decoded":159527,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"dde7fff3ebb533622651dbab19869259","sha1":"9eccf368daac228e4516f59bff5f813866b3d59c","sha256":"dd416e774b67dbd5dfca792faf5ab57fd65e9315b751d8c5140e1a9475c9c47a","sha512":"fd3ccf5c516ff31ee5bea3a865e70913e2c80b49bc4a490bc0ef9bb7acd8dc2327f5bed597dba7e6fcc51b95277d3092f85b4fc1bde717fe28e02965885536ee","ssdeep":"6144:M9cM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9Hy8avOJ+jxHR4J1g:vp7+//0hBPtRJez","tlshash":"69a42acdb3c674229392f578903f018bb67a69a2b44cc899f28adce42d3455a5173f7c","first_seen":"2026-09-25T05:44:41.772243Z","last_seen":"2026-09-25T05:44:41.772243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/six-bg-2.CE1voD8t.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.977Z","timestamp":1790315002977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/six-bg-2.CE1voD8t.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.DqNwwtWe.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doeHsJBhN3SREtzDiVpmTzzxSpIM3te3TnZ2nDLfl13hSmg3QWNgJfVRBzMt51vazQL1hW6mLGiZj8eS4iPYap1n0vOalsGUsFEd2537uzQh7U75JbMWgdxLVG8ZLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e4ab1b8-OSL\r\ncontent-length: 14256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14256,"size_decoded":14995,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d51f77e60cb39de7f8b8bbe0077ebec","sha1":"3e95702e339ae90aa1f8d0efcd27362afafaf7b2","sha256":"b45476ec623175552ed964dc53a7f4f828189dbc4b630b08b3f31a6ce13d55e0","sha512":"b854ef87e7ec3fa6167f82166eb36d302f42057905fea89b74c3a7d9050fdb910eeeeca2b6fc1542660366c4a61fde844539d6818caa31558e17b588afa2a222","ssdeep":"384:uma3RaIHvAMmBSj+yppUL8zwPhOXK0TJBxySLWV4/wAwrhuCil:uJ3RhZj+EiGwJO60NqSj/wAODE","tlshash":"8152d19d8207e4f652f46cb027e618a7544bf02e36fef49da90013130f6ab199e9901e","first_seen":"2026-09-25T05:44:41.773378Z","last_seen":"2026-09-25T05:44:42.554151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/six-bg-4.CveXFw-n.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.980Z","timestamp":1790315002980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/six-bg-4.CveXFw-n.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.DqNwwtWe.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdFjav6e2NEHKJXfuqqhNjECM1%2Fk8uxuVtza99ojfmBm2lErazuEOgPLXg9%2B12PFki0ItzeNC8ErXoyslnm%2FVWcoiHoKp4%2BxauY7CEBwsIRpYyRvXjUR6yA6tTaUwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b600ae4eb1b8-OSL\r\ncontent-length: 24140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24140,"size_decoded":24887,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68ebf14116e14ab801136744e8355480","sha1":"89ad68196c5611cd99e2a1eede8b907718690b92","sha256":"582791672cf41f3301817d53db6f97daaff5c5aad7cdfe8c740d4bb159e58e50","sha512":"52e24f224ab18fc91f0ecfecd831d6f2e20b226872b5608a23a449505550e6b08081f222fde38e4ff1bade2e717f61529ed6c5a203121e07c41ef0190fc64b84","ssdeep":"384:W82d2Upovr9GgZM3yLWpVwOImff1TCYMyEUtSHUGl43CVfKyDmK5lFugx23zjJm5:Wb5ovYYLLywoVetKtUl4yVmK5f2DjQyC","tlshash":"4eb2e1da9d49304dcebe2a4777edbace9e029ec16c8b5c5404ff3d7700764355180a69","first_seen":"2026-09-25T05:44:41.777579Z","last_seen":"2026-09-25T05:44:42.567868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/starbucks.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.340Z","timestamp":1790315002340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/starbucks.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHrckPlkNnSQhPSKW%2Fr3k7pOQvTy0mGuHfDi6rx7VtgcHCFG%2BZErQgMjnhWfoWnluYHdSbi0FKJSbEFKpkd0Mw%2BSwIPDNWWy5%2F3axZyTD2%2Bo5uQHn%2BwVvsxuJmYjlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad21b1b8-OSL\r\ncontent-length: 4380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10130,"size_decoded":5178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55486dea2a41656e3d3e7592cdd127ef","sha1":"0167e4167cbebb12d5dbf7134307d34676f747e7","sha256":"f86f78e68957415466a514cf390d34e0fe92d9689e1b91d99d54f280cb9535a4","sha512":"1348d13c49d1315f5cfe880bd6b94eda0cbf4ea3b0c4095b339c3a5bd0f01f94022380ba1f50eaceb240276420fc27e06dfc7337c9ea88343594b369fed42b7b","ssdeep":"192:Ti3+qu0gv9uoTvFOC9Y8OPOCZPC2AHXZDghKhI1o7qp2J:Ti3NXAVTvFOCS5ta3RQKhI67qp2J","tlshash":"9d2286dea3d4a2e1e64af3e9b73264793acb34f32f16ce55815cdddca69540d0888c84","first_seen":"2026-09-25T05:44:41.778978Z","last_seen":"2026-09-25T05:44:42.573914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-6.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.377Z","timestamp":1790315002377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-6.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKSQh%2BbUfgv5WzGXYu%2Bzb3HD0ZKRB%2BvdgUd%2ByGmb2nmYTdb0zG6UGdqi0CU3FLugaEWbFQ9DT761H8Dxn3%2Fws7PPFcS6WEdAcy%2FWHjuNvg5bO5SNnYkFuVZ9KXip2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd6cb1b8-OSL\r\ncontent-length: 31368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45949,"size_decoded":32167,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4433e56040fcee9cfc5534bbc692c355","sha1":"4de883eb568c7cdcf2ecb12cfbf919a7e9e225a3","sha256":"d9299e7c35d87431c501f5637e7d6971fd984d74db55c48c214a0b38fad4b2fd","sha512":"ade09a8b583021f181acf200d20feb3bac49070b573654de04174bcaebc2e204155d6ad49f702cd12d9656b9c89d80ac12a192360f6d8f2d031c7b4c68f9a69d","ssdeep":"768:pFv/A72JWnI4dmmzdS4Msua9wkpPnbwNYuS8KisATqmDW9A4ogD3zvY1VdP:pFvDhmQ4MsKkpPnbwN7SEmm69At+DvgJ","tlshash":"cd23bf15645fcebcfe715834f216a9fedc64289ff08ac48e8b9f31929316a128584db4","first_seen":"2026-09-25T05:44:41.781248Z","last_seen":"2026-09-25T05:44:42.645011Z","times_seen":2,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-trip.DeHx6BkD.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.378Z","timestamp":1790315002378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-trip.DeHx6BkD.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uj7NU7kEInzVdUk5Z87L%2B56jdqRQB%2FoO2RKBVSqKmJlCiNvzklB%2FbogaLEshB8WPXwFUD7Wlad1%2F9zTOgtiaA62i4t0MdVaJ6DJGh3C%2FcBv8OXGaof6Np873Qu%2BXog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd6db1b8-OSL\r\ncontent-length: 5452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5452,"size_decoded":6201,"mime_type":"image/png","magic":"PNG image data, 217 x 217, 8-bit/color RGB, non-interlaced","md5":"b248c94645126bbf7fa6bab64935111f","sha1":"800b5d86462690288cd3378cfe7e32fa1bebabb2","sha256":"bc74fafc2d3bdb57a6225a0ea9fb6c9e92df6adfe5ba753300815f5a92c9dffa","sha512":"ba7effbd17a56f79c7ef5e0504cfe106a95b1b60e8952f21abf21e29adb9c9647226aa183ce8da5757da388af9909131d9fc4c941e55ad3793114f9a51eb9556","ssdeep":"96:zFtkUtWohZzfZBZOzw+yEE7mbcKFEbI8k6CDC7G4G4G4Gd:/kUnzkH7VeI8k6CDaG4G4G4Gd","tlshash":"52b17d858de78cd1858d6867bfb556708e5234cbcbd86c857a4fd221cf13a863886ac8","first_seen":"2026-09-25T05:44:41.783406Z","last_seen":"2026-09-25T05:44:42.585341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/map.BzvjlDTN.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.983Z","timestamp":1790315002983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/map.BzvjlDTN.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQjkpKSzSibT83ekfIDpk6IpGDq8dBlY4QDjHL9JZADpOfUXQQlXvah2f5IXj2m4UQYCJx%2B42r2ePXlADPvwwhXa7oGa3%2FqarIPcOPxtPBRSEbM%2BckU7f4FSyHLKFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b600ae51b1b8-OSL\r\ncontent-length: 99426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99426,"size_decoded":100171,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54fe871669d6b29221646ec93bd8e525","sha1":"f1c1fc0a7a96d24ae25655bfb1f51cf450675c6e","sha256":"61711797c68f697343d4d7561d78a7a5e65a0b8d56b7eebc3090db70a885cb0a","sha512":"1147238c2597cff86bb516d1514aaee5165ed91bd31668c4f92d0d7cc17d75ed507dccf818015a04e082a158bdcd97eb0e765c83620fb2acdc36111078ed7339","ssdeep":"3072:CVY9w+trGVggJgwTu12bEqSjAvQeJGPNbWVA:Cyy+pGSgJgwTvbMEvs6VA","tlshash":"1aa312550890fee1d8b587bb7b7c542ec6714c8b6662a5d039ce11da640ff212713f3a","first_seen":"2026-09-25T05:44:41.784789Z","last_seen":"2026-09-25T05:44:42.620557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/third-icon-3.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.365Z","timestamp":1790315002365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/third-icon-3.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYZKbX0N4jj5sZ%2BowcmSw%2BF%2FYkM5qGK00bu%2FCJ7VpKlM9d6Tr793wuyw0NeZXUByagP%2BLANmETElNuhWv3l%2B5N91lZGDoV21GF8aPH0B3CM%2BJD0aydTpu2J9M0PTEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd3eb1b8-OSL\r\ncontent-length: 429\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":708,"size_decoded":1228,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d73cb6df23f626b51fb9c18492d40101","sha1":"2e299a40e3ea0466468ca1474c543ab0c24433eb","sha256":"4e1dbc180408fc7377d5dd3522a54d3d65a4d748b65ef1b51b0bbccf5b17becf","sha512":"fc669156571fbc7a4d4206be225d85357a342968f40dfbb86c653ccc5970ec7436e14ece9b21340d5301248b9f65945e89bdd65a9a2b01ed01094d19b9782b8c","ssdeep":"","tlshash":"df014ee942acc4deeb4fc35275510cdb828a08f41f0e00ddb6ac9e8fe3190a60f40ae5","first_seen":"2026-09-25T05:44:41.786331Z","last_seen":"2026-09-25T05:44:42.56897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/airplane.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.397Z","timestamp":1790315002397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/airplane.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeDWKWFGFv2uN5oq3ZwMbSrpxY334krr9L33FFjkNUpuI%2F60K5qjjvhzM7AHHw06jxvoy8JdQYMipfuKo5dsNvz65vQoxWXxNsAFlqfNZU4Vhu2UR6tIqg%2BWxdzl4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd80b1b8-OSL\r\ncontent-length: 394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":707,"size_decoded":1183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b2e174f605709c8ef724c3cb6f86c6b","sha1":"d8ee2771e7d7468f1f99b12936df9809a0c21b48","sha256":"d170a4bdbe6837e305b972ba80198448b1de47c4d25eeb77ff96d1f2cfca217c","sha512":"0471a29bb9e2943f5e24b1b9793cff35ef2fb3356b862079b138ca719f52beed65d4ae5d62dc93c1ec6f50643db67b845b25605f8a545e5c457e0b52bf0a4a21","ssdeep":"","tlshash":"780110d453fcc0315700a314b2396465f63e34f59318a91aa3c0e91ca10c609424b28d","first_seen":"2026-09-25T05:44:41.787749Z","last_seen":"2026-09-25T05:44:42.577171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/icons/redotpay.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.415Z","timestamp":1790315002415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/icons/redotpay.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uY8UumpFEX%2F3Bxap5%2B63ZHlGP6nMrTZbmpFtCVS0VrPdDW%2Bg2fZXi6AmRn6454jn96vN0AuQFgc6y%2BmuUGzSUW%2BUvO54D0j7egjYkUlvlbm41ovCkS32R4ydDEmcZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd1d90b1b8-OSL\r\ncontent-length: 1851\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4712,"size_decoded":2647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f632546a4bd158956cc56ca5d9c7c0b8","sha1":"800b01b3db4c2b784687c0d481e3fc3447577486","sha256":"51742a3f4b07e88b89ee010412e208281a2a5bb6d23e48d805f49392785f6734","sha512":"e09e4173fca789a3623f9961d418bb7fbadbdeab13e5519585308de423fdd9b3338346b69b3b32723e51ba6f8ebc8b3bcfe1ca8b423fb12d24d51182190493c5","ssdeep":"96:UAAvELZEnbwstVgltwXzBYKjcN0Os7QYDGQh:UA7Ebt0twXz40F7ph","tlshash":"0fa163f236d8a3f4dc46ab48ec3604b13e6738fd6f9396d6c3602d5278106ba4c899d1","first_seen":"2025-07-08T22:30:09.919634Z","last_seen":"2026-09-25T05:44:42.610467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/client.BIBgQUEh.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.957Z","timestamp":1790315002957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/client.BIBgQUEh.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ni7V0zu6nbcx6CofUM4xOhCmNqEXovomZWpYQi64hG4CmHAwedZAZVyB5KSCwAWsii144WQqXZD5O8ex%2F5gVXUfP%2BlVBjuF4en2MFXF4VhQ88lv1lekFCeHgEVcRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6007e37b1b8-OSL\r\ncontent-length: 927\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2448,"size_decoded":1728,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"365b8457e5cc6a32829fe2b09279bc59","sha1":"eb74db596aa2ee5f42270e7331025969c214713e","sha256":"a5947db54d9c0f2af54a4dc42a4c083694c00b4ffc8279b02eb8c12e4e2e98a3","sha512":"e5e760e1da54668e6de515fd788444f17f746880c99be5564927097372976f9a04a56de84de458dbc4b8f1a08d2265e45c4d163083b42463f41540dfc3863fd6","ssdeep":"","tlshash":"b451ed4633e21a3c2557509e5a6aed0ab378340b219f8c443e8ca5687f9493c83ba3cc","first_seen":"2026-09-25T05:44:41.790345Z","last_seen":"2026-09-25T05:44:42.607169Z","times_seen":2,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PV65Z24","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.346Z","timestamp":1790315003346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-PV65Z24 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\nexpires: Fri, 25 Sep 2026 05:43:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 25 Sep 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 132485\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392859,"size_decoded":133115,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6189)","md5":"da6e320b9ef8917c6ebdd478ee4aecd9","sha1":"9cf7831a40178199a0b9400b1d11ce2644e04c20","sha256":"6e7be0d90ecba6643532902ae5ed1166ace30cf6110b342ddbe89221e3c1ec31","sha512":"66e76e88e241c079ec0adc1bc2e75a3cd9c68a89b4b63b03cc9649e6db7622fe150d1cc439f407f8de8adddb41d68f16f302e2878a2c111462563d42c845d99b","ssdeep":"6144:twp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLCT3a99:ovKE63sV7Tw","tlshash":"438429cdb3d6742293a2f578903f018bb27a69a2b84cc899f289dcd42d7455a5133f7c","first_seen":"2026-09-25T05:44:41.791519Z","last_seen":"2026-09-25T05:44:41.791519Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/index.Bb25hmWI.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.415Z","timestamp":1790315003415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/index.Bb25hmWI.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/client.BIBgQUEh.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003; _ga_PNKDMBYNQ4=GS2.1.s1790315003$o1$g0$t1790315003$j60$l0$h0; _ga=GA1.1.1384861762.1790315003\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZ73g1sV6yGxTBkC9xVuk2yx5Yx2QO04v0rOGixig1x89mc9dcceZBKDGidjni3EDd2mecLtaM5Lt2yFBMQ7vImh5QvT9%2FGhc8pd2tr2AEpDif69DfnbcmHRWCvoBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6035eadb1b8-OSL\r\ncontent-length: 50230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":227057,"size_decoded":51031,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1114)","md5":"131d8b32c2e5bde48cdc52fb154f5602","sha1":"7b86a9dbfe858ed62953ec37e27120a950a54960","sha256":"a6d7c0e6c299b76e89d837ba748ff4838c9045d678cc8359aef5816810ed37a7","sha512":"4bf23ef9376a685aad2ed785af780a5b04135e4f5063afa4bdfa3ad8d9fc619cc68cd17da292496651adee0c6e25977a28326031c7fb64d98e3ae48576458b30","ssdeep":"1536:dc0M3vZ/lt1lpOWCXCN7AUwsUEE7kCrd5TYZ3zQh6iOXxXzXhwLBfD1UGb6gsawv:dhM3DFCs0UwsDE3TYZDqsXxjXhcRZCv","tlshash":"0e2472d86af62571a247e13a0a6fdc84723aac0b074ced52390cd6a45f5443c97bbfd8","first_seen":"2026-09-25T05:44:41.792598Z","last_seen":"2026-09-25T05:44:42.571859Z","times_seen":2,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:43:21.154Z","timestamp":1790315001154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:43:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.33\r\ncache-control: no-cache, private\r\nvary: X-Inertia,Accept-Encoding\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:43:21 GMT; Max-Age=7200; path=/; secure; samesite=lax\nredotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:43:21 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZU2%2BwD8uAcxIBqQJbsxsqi9JtatcSzW1txHAkIseCH7PPx7LiA5XwleANHVrqP6G3QFh%2Fc0ojONsTUiaqNz%2FIRY38HJcSAcRCWUtOioZ4FDaPOSpfhP6o57HQtIJA%3D%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a407b5f57815569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-25T07:43:21Z","raw_expires":"Fri, 25 Sep 2026 07:43:21 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:43:21 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"redotpay_session","value":"eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-25T07:43:21Z","raw_expires":"Fri, 25 Sep 2026 07:43:21 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:43:21 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82303,"size_decoded":15536,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (517), with CRLF line terminators","md5":"bf2a3130e6f9b6d9b28b8f13570c84b6","sha1":"3f6c0a78294a9d4a7663db373504096c6b84e84f","sha256":"7a84e23ef39ae3b926691b0138900faee85c95a630dfa3756ee9456d834cc3c8","sha512":"7da11be5ee45f3e742b9cb8bb787979ec787283b7aab7b64856cf9bd36dc4a26544d55a3c50f566d291b91943970fa4539de29a283a44116cecbf62a86ffffd4","ssdeep":"768:lZgF6V4vE8ZoOfRl5lNkghUipjUHrAhVoF6T/r+zzt9dSdPvApB98zUAnvYi5Z:lH+N+grNUHr+Voe+zz/dSdPZnvNP","tlshash":"8483426052c1947305b392c29ab1ab6aff80c24bc74b56493afd1bdf1fb7c55c853a48","first_seen":"2026-09-25T05:44:41.794334Z","last_seen":"2026-09-25T05:44:42.650314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":15,"connect":1,"send":0,"wait":644,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/index.pZZ2GgsI.css","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.292Z","timestamp":1790315002292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/index.pZZ2GgsI.css HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1UTUbcDQ0cmlqZ4UT68yoUDNlCxJNQXNq9NfRkvJGUTgZeQ1cBfIpISoyQney7RSc5%2FQfWzCRaBJSafBu9gzOTD5LyawSC2aSnmunRbdJBuSFPp223cwVkT5unywg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a407b5fc5d0eb1b8-OSL\r\ncontent-length: 13442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":140615,"size_decoded":14229,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1059)","md5":"737c8489333cc3611c4b00e9e047f3bf","sha1":"731c798cce279e0c6f4a4d4091e5f61ba83911f3","sha256":"6a2d02923b0265a72719665aeb0ff119310c4adf75c459d88f8825803d5808a6","sha512":"b7c3df0df7d49b6a1decb75c4d8577e6b848bf9015de42f5e79de4e81793405811d0efae324646833e7a1f5753974f72f802b2a3f5e1a382263a26bd2209fdaf","ssdeep":"1536:9sg1Qm3DfKW+I6eK+roRNDncUaNTjxf+aQHY3v2vwvdv1vEvrvhvep:yUxuY3v2vwvdv1vEvrvhve","tlshash":"e7d3cda928e215449227492553ef0f78663ce0a31817acf9b38e598fcf46f7853c974b","first_seen":"2026-09-25T05:44:41.795276Z","last_seen":"2026-09-25T05:44:42.608977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/aliexpress.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.368Z","timestamp":1790315002368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/aliexpress.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7UuUmL1sgRZqFo0VpAMpP8QEc48IExYXrXPY4vqgE%2BtN6BGznoN06FnjMdcjbWhWvcoe6QA1FeI%2F8ZvNoVV4bRoGdgXfPDvnKvopHZ0GhjWRFlRmsQ%2BYlDNKNQ1Z6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd49b1b8-OSL\r\ncontent-length: 1732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4975,"size_decoded":2524,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea94a20d3e26e180ed259cde63c2ed9b","sha1":"e6ace270759e1a4f3e47dcd695316cc1802414b5","sha256":"547e227a4d4007378a638de78020b4120694c653088162e7ec4fef82f54b9851","sha512":"e920c886b18ac6b500ec08b101bdfe74357932965b331a62586208277cc799df61b67eeeeb4078b6ba723a4d7ba36921a66cc498895e4e25268da0395696336d","ssdeep":"96:wKbc0AnNgyt75rOpSywwCK5UPvrXask5RAtITwDNiwO40/sU2UCPKoF:NbcDNgynOZDCK6PvrXaJ3TUM6Q2UgdF","tlshash":"5ea10150e39cb1f0d28eabd19726f4f42f6632faae22d52e8ffa3c60c61481f5954540","first_seen":"2026-09-25T05:44:41.796429Z","last_seen":"2026-09-25T05:44:42.568403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/ariplane-y.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.405Z","timestamp":1790315002405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/ariplane-y.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2cOiXJPmNBRrebxXus50BixlZ%2B9E4SjcuFrffRikxc6LuMhcnJUJiisZXm7e%2BnpYNw5uNMDKB90qN5zYOBWkYO7qE3ubJNxrLQM8D%2Fy94fz3yy1oSb2tGqi1WhcWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d87b1b8-OSL\r\ncontent-length: 17821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17821,"size_decoded":18565,"mime_type":"image/png","magic":"PNG image data, 232 x 232, 8-bit/color RGBA, non-interlaced","md5":"1a9157922aefa488c07b262ceeac6af6","sha1":"498e95b578559ea9d0ae09cba53a9852a34bdd5b","sha256":"cd9c9eb03399628fe5f72e7f6070a03a557d982cc877d2a1706af37e1f25cf06","sha512":"8a8c770e187f223a7b40c22a1792049f82ad30f378894af3d2d860b1188ceb9cc0c16719feac890ba7973470c0db42f171b43d3dc6f309fa715835246de2d848","ssdeep":"384:AuCD1mrZNXm0BZXfMss4X9yXvhJZiCV3sX324vHlDl1fb:mDUZNW0jXfMJ4XkfhJPo3T9DlZb","tlshash":"6d82d0b8c02d509e4602a1216bba5d11b1415873cf77e85befccce2f24a7cd62f95a91","first_seen":"2026-09-25T05:44:41.797722Z","last_seen":"2026-09-25T05:44:42.613522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/fireblocks.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.410Z","timestamp":1790315002410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/fireblocks.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYAXFN0WMBLWxQMgsFISuyOA5TeayaAUSF3Pvbvf%2BxLRbh6GkgkwCPnU9XxU0WJzkG7b1SoPjXRQLxMvELw8A%2Bg90eB0BqHPdhM4kDH%2BhenWeji2Tq4XUhrR7ai8yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd1d8cb1b8-OSL\r\ncontent-length: 7754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7754,"size_decoded":8497,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"f2df041dca0e3b26d5104c0336e54785","sha1":"eacbe30f31ea7ea440067cf1a4605f0e0da8937d","sha256":"e439d14c6e2f0cd9c024c64c78fca074081eae6ec725094402484f4cba42eb2f","sha512":"ad1e70df64a98aefd44d98d54f60d67a94deaed1c3e3491d5e9097307e636c64e79e8382e63011733e216433a2e44b5ba73c61f36212fcf8034e2971bb5ea3f2","ssdeep":"192:inl5jKhc5dOn1ZtYzZ1EiWeCKJbyd7VDfvNrW9c1:HC5dOn18jBWeCKJedPrYc1","tlshash":"29f18d89bf40ac10a7d9f7665d4f0216d33266020da26bab9badc9c572c4c7c80fc5cb","first_seen":"2026-09-25T05:44:41.799428Z","last_seen":"2026-09-25T05:44:42.580135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/oklink.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.411Z","timestamp":1790315002411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/oklink.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdSgpv2rS6ukamyDl%2F5Fe%2BbI7nHw7kDliUx1xJK3SunBXAPvv6xaRnZHHqhLBSQ3ZVbw%2BC8JqnokBa41PuPL5E6RMTzmZZtWj2k%2Bzz7zM2xvYdP0XbgWscrfQYeTdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd1d8db1b8-OSL\r\ncontent-length: 2173\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2173,"size_decoded":2918,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"ce453d5cee8cbe378796be7b54fd4c79","sha1":"f339c879a17f669ee0c226144ffcc06a0cadd6d4","sha256":"b5294d953119d3bfd6aeac8f4449ebb882d8b71cf07b3fe2d0b39688b61bc279","sha512":"753dc4500fb6fef4bf3a5d093d8f6c5f395cb382e49b803b6d12bae07d4da74e9c567d773b153b2971de79241d7432633900aeddb63522b5e1cc65448aa7f997","ssdeep":"","tlshash":"0f417fb148232bf17e6c661a83f940de34a91b146cc68fd49c68f1a60003842eced674","first_seen":"2026-09-25T05:44:41.800736Z","last_seen":"2026-09-25T05:44:42.601858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/elliptic.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.414Z","timestamp":1790315002414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/elliptic.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtWyQmUyceAJXzvcHjTW5ohdpt%2FBhUxOdtYQlMSxhm4t2a4iTV45ZULj2wQOWvDB3LwWx0SiI40dGGxxW74jrGUcdUu1L86mzBzE0Rw2ZHG4Vq6ZQiAtd7d3d2Qhyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd1d8fb1b8-OSL\r\ncontent-length: 4366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4366,"size_decoded":5105,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"b6de074ed6b90bdfe99399ccb8b8ca89","sha1":"b7701aef8ee22ff4691e38064594e4f0f935c5af","sha256":"22b445758424d55c25d976b479b5671f6407365c268579718a0d81882769edcb","sha512":"376dbc5ec2e97d7545bb284715fce8bf198b0305e0b953cba6f036af8df65001707d0dbf7c8db6cb0b481ab9cc9d66b87619be305d17bee6694a95073544d287","ssdeep":"96:AN2QjirbbSb1Oiwumw2TB9BwT69hOLiM8v3NPSM08uZS/xbSblt:fbbSbEfNfiT0WiJ1SMV7/xbSblt","tlshash":"8d910a49dad58d02b648709478d340336a42c5b94958f28326eed52f18b16f1c3faa9f","first_seen":"2026-09-25T05:44:41.802452Z","last_seen":"2026-09-25T05:44:42.569604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/ScrollMagic.DtXwR14N.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.741Z","timestamp":1790315002741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/ScrollMagic.DtXwR14N.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGvMxj8GyuYp9ndDNWbNN9Jg2R9bDFlxYSdmZBt3UMtknS2txEIEtQdRydrUttcOf7U5Io%2FiMYBJ7nyK%2BdL%2FZGxqsmHTpu9lH7uOEOXW6nk4qQM4ZvzIsLzQfHAhQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2dfdb1b8-OSL\r\ncontent-length: 9021\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40830,"size_decoded":9827,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"f43ccf7cad4e9f79c9bd92970be203d2","sha1":"28f4d5e002e8238dcf82ca4bc2b3ccd910ffa9e5","sha256":"30da4f66e183c65bfdf5e13a499e16a5115c3bb185e92d67641eb160cd27a94f","sha512":"3679097f415b8e9a2e5d5b92d589258f078f5313dba4cdfedf3a6764c4996b74096b2c85985d96d48de67c4e02c6d0782d72e6b35c1bb184613fbc6d48254959","ssdeep":"768:FcC6+Qehgl9i60s7k068SHTzlUhDCiLmN2QB0Qlm6:Fot9b0+970lU8UmNIQlm6","tlshash":"7303654d7bf22036a787f179ca1f99087376444b568aed50790c62a02f5983c4bbbf9c","first_seen":"2026-09-25T05:44:41.80433Z","last_seen":"2026-09-25T05:44:42.566456Z","times_seen":2,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BWDlLXVt.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.745Z","timestamp":1790315002745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/hoisted.BWDlLXVt.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqYGHo7elWbqKHpzswEXnlX2lBzs9Wyo4pK37pGHjchalNMMi%2Bpgoly9AN%2BDM7QY3zvyj2RZEjTb7F7i7c6NJzj0ujW8v7%2BF%2BBnM%2FxJgQ%2FB%2Fg1OCAgN0u85Wn1G6WQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2e00b1b8-OSL\r\ncontent-length: 5730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24360,"size_decoded":6542,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"79de8a3aadc8e27c587961ead24d367d","sha1":"38a2c00157fd34cc35f0d3e4c4293f5da741a4c2","sha256":"aa672878ea071b54d4691c8a17329fbeff4b9becd83cac2e441e26241f1f1787","sha512":"7f3c91f60424294c192c80881b26a0c461c77206c1ada12f5a7613124d4181f0049f108af5b357dc1c5cee4638b9b0277fc8888ae92f212b6a09e2eccae81105","ssdeep":"384:nbmfAd5IqRjHbRhCpDnG+HQ9HR46/fZHgQf0TxeNKjwc:nbIYIqRj7RhUiKQ9xTFf0NWKF","tlshash":"22b2538a12f1357412c7a07b0b9e8c1273354407ba88ae683d9d9a945f5d87c4bf2bf9","first_seen":"2026-09-25T05:44:41.80571Z","last_seen":"2026-09-25T05:44:42.580665Z","times_seen":2,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/third-pic-2.DxubKXvR.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.953Z","timestamp":1790315002953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/third-pic-2.DxubKXvR.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwtjTHzIIQSBNZ8LQf8mCsuqJoyEn2unp9%2BrVdb48VZoX1HGYpoexcqasQL2JOV4Wevzb7loW903Nz3NFRGNhXPkhdy5GY%2BSvip7E2Ynp0NOZEwJFVwu0CnaLVHfXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6007e35b1b8-OSL\r\ncontent-length: 11720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11720,"size_decoded":12463,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a806ed3972732799eefc26907ab2121","sha1":"4a38a5d66d361d8a1be693cf9f0154d76259a560","sha256":"d14b98dc97815e64da86f4232b4fe6f5dc53232517f499e3e8f3cba95591fd75","sha512":"886a55af6e7eed9c94196453bc2495f687c7207119a2f1bf839471cb2f7446079efa9260b2700abf3e6de67f78be246ada827b731d30ee41b9615d1405e5eca0","ssdeep":"192:sj7n2JT4ElPz8aLAD8rCFFzvgvoIR246Ly81M6Doy5hwtqQ4BguN3N8/y9/U:c7cZJLAIrCrzvt4Iy8y6h5mqz+uNd99s","tlshash":"ad32c0c6c298f042d9864f810d7ef4f23f63aa9fb52ebd509207283fe1848e115499f4","first_seen":"2026-09-25T05:44:41.807206Z","last_seen":"2026-09-25T05:44:42.617894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/fourth-bg-2.BVySUCdy.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.971Z","timestamp":1790315002971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/fourth-bg-2.BVySUCdy.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQZow7SPLGdzXZ%2Bh2klm0UG7Vc2HJhDLPZ3Pcpgn74HSWx%2F4AGyAHwNRFmLTwHQsjSMvwnnisgrMF2kbX5VXoZum1%2B0W33O%2FV8pziF9rypqkF1FQNtQ14liVxjwkoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e42b1b8-OSL\r\ncontent-length: 60806\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60806,"size_decoded":61553,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9def1162b72a3fc9be6ad9f5f2a8d910","sha1":"bf9fb42e00fbbaf1fdb2de7b40d61a4800b9874c","sha256":"641a35b2e92f997648c57a04ffb99887ed3218c02cec7d5ea7a5ca150953564d","sha512":"6ec90380493e322af52eaa1d72db57ebe3c90fdfe2dab6d9a79504ee5d4163b0ee28cb8b424a23695a2683351b9825371d02c081dc7c9c5cffb4a527fda9012d","ssdeep":"1536:agHoD/wS09o7lo/w5e29UHvXhy3Y6nF2pAaeK6jswVAg:9mJPhavAY6FnaegGAg","tlshash":"9b53025feae41acf970ab61c3017d786751d8fae7478b6023d51633847e0b068ae6c27","first_seen":"2026-09-25T05:44:41.808911Z","last_seen":"2026-09-25T05:44:42.594558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/fourth-bg-4.DYXKTgGG.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.973Z","timestamp":1790315002973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/fourth-bg-4.DYXKTgGG.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5rGMrW4TOlIaWZbm1Z7dmWRJhGlZBxgVRBctIcReMzvADCLsMzb8qJHsj4O6EvlmM9gkDN%2FTH67kPM%2BrDOXfZjk%2BTFuPEpCZj4Zx7Scq3Sbo38frPQ5u7bMKlfWyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e46b1b8-OSL\r\ncontent-length: 83978\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83978,"size_decoded":84723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25b0f506f8a1cfd0cbc4b3eb53831de9","sha1":"d77bfa4272cdf9c2f89c981d13310f67d2c4155e","sha256":"0ef85efde9732f8b1bf5f7ed2855428f73d13c45ebe3c753a41d5a9f0d2d3c64","sha512":"f6220ad157ee9d9cc4bbeb4667c437ced0767c64d5a7bceaafbe57e3d70a114f5bcae910e5f02521a17bf10a95f2b07801cef0b18ae58cade4de6f2df219673a","ssdeep":"1536:xJJlMWjutpus89edT/ElsVesOlEbq4SWq0LdfrfJVHkeS:xJJlMWqtpp89edTysVPQWqqhXu","tlshash":"978302f07b52b457de23fff458b056fb26e6171cc335a4ac74222910dad3219c2aca66","first_seen":"2026-09-25T05:44:41.810893Z","last_seen":"2026-09-25T05:44:42.622373Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/17678951126/?random=63783556\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCNvcsQIIh9uxAgjTxbECCOvMsQII7c6xAgjVz7ECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIzeaxAgiO57ECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=ChCCsL4tyOy-Ldftvi2d6bc4\u0026fsk=ChAI8JTT1QYQ366klvnnoeUNEiwASmeOWrO5piU0zjuzAtcquvOkU83wSn0tIeZtqR0eDWLX8k7CqY1tnWmWxxoC3LA\u0026pscrd=IhMIncjYjoOJlwMVrimiAx2Bzx27OhRodHRwczovL3JlZG90cGF5LnN0L0JXQ2hBSThKVFQxUVlRb1lLWm1ZSDcyLTE1RWkwQW9qR1FOUVlrMkVxZ3o5a2tqYkJ2VEdxQ1E2eUJPR2dmTkUxTHVYY05nUDhDVDltRnc5cUxUYUhvclpJegwICWIICAAQABgAIAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.840Z","timestamp":1790315003840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /pagead/1p-conversion/17678951126/?random=63783556\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCNvcsQIIh9uxAgjTxbECCOvMsQII7c6xAgjVz7ECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIzeaxAgiO57ECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=ChCCsL4tyOy-Ldftvi2d6bc4\u0026fsk=ChAI8JTT1QYQ366klvnnoeUNEiwASmeOWrO5piU0zjuzAtcquvOkU83wSn0tIeZtqR0eDWLX8k7CqY1tnWmWxxoC3LA\u0026pscrd=IhMIncjYjoOJlwMVrimiAx2Bzx27OhRodHRwczovL3JlZG90cGF5LnN0L0JXQ2hBSThKVFQxUVlRb1lLWm1ZSDcyLTE1RWkwQW9qR1FOUVlrMkVxZ3o5a2tqYkJ2VEdxQ1E2eUJPR2dmTkUxTHVYY05nUDhDVDltRnc5cUxUYUhvclpJegwICWIICAAQABgAIAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpay.st/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/17678951126/?random=63783556\u0026cv=11\u0026fst=1790315003107\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be69n1v9233915017za200zd9233915017xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fredotpay.st%2F\u0026rcb=16\u0026label=0aq3CKfXjbobENbF_e1B\u0026gtm_ee=1\u0026frm=0\u0026tiba=RedotPay%3A%20The%20Ultimate%20Crypto%20Card%20for%20Secure%20Crypto%20Payment\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=1757129313.1790315003\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dconversion\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCNvcsQIIh9uxAgjTxbECCOvMsQII7c6xAgjVz7ECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIzeaxAgiO57ECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=ChCCsL4tyOy-Ldftvi2d6bc4\u0026fsk=ChAI8JTT1QYQ366klvnnoeUNEiwASmeOWrO5piU0zjuzAtcquvOkU83wSn0tIeZtqR0eDWLX8k7CqY1tnWmWxxoC3LA\u0026ipr=y\u0026pscrd=IhMIncjYjoOJlwMVrimiAx2Bzx27OhRodHRwczovL3JlZG90cGF5LnN0L0JXQ2hBSThKVFQxUVlRb1lLWm1ZSDcyLTE1RWkwQW9qR1FOUVlrMkVxZ3o5a2tqYkJ2VEdxQ1E2eUJPR2dmTkUxTHVYY05nUDhDVDltRnc5cUxUYUhvclpJegwICWIICAAQABgAIAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/binance.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.406Z","timestamp":1790315002406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/binance.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdmezpqSPNDnw0LVKzTOcTnJg%2B%2FYw0hP%2BiPmnsmt27Vk6bJuWjrZAyTgEO3EGm3y%2B%2BNxaKmvEoJ8GG50OKltzlRrzZwQ7ZGyT%2FN9FJ4aOrV1QWd6XPKzg5e9zcw1Vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d88b1b8-OSL\r\ncontent-length: 3878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3878,"size_decoded":4627,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"c5cfd22504978a251d8624a6dbeffb7f","sha1":"4edc2d6ac50a8bcd7bbccb60fa1cf519f6645acc","sha256":"41b1d3f20d0be246bd63572e46e03a84f5014ad065ae96658bfc0684997ec746","sha512":"09c144b681b826d7914bb32b5bb0126a209797e43f7290981d5e61bca1ddb98e0d49d0e60534da158af25c244b20c9726bf99cb85291b8449608812e40cc189a","ssdeep":"","tlshash":"f8812b0d4e4ccdfbc22ec06774efefaa405598e90ca4402d919d25a8bd365e1db0d164","first_seen":"2026-09-25T05:44:41.812815Z","last_seen":"2026-09-25T05:44:42.636368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/telegram.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.343Z","timestamp":1790315002343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/telegram.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xU5AzLcKmHB00XyMJ4JXqYfXJKGytafmq9iTFiFkSRouzotbW0y0Jhcue1bJJIIYAhEBlgasN09sIDsvMbVfUEA79MWlt4ZeDvbFN%2Fih1NvUQSNBiafRH2tmJmUbGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad24b1b8-OSL\r\ncontent-length: 403\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":695,"size_decoded":1190,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c99384ec9345b3cf4eb7817ab5c88417","sha1":"830fb3a307bef1b137f32ca7c16a91ea0e8d88b9","sha256":"b43fdc3daf13c73cbaf2de552ba7172e44a34cadeff0044cb1dc2748b570a387","sha512":"b715e2ef712fd1fa373edec137a496dc58af50df77bc8bfbe77265970f4d01ae45d50d11133bbf25ef76f20d07eb98abba12562237e00295f1ff82fc1bb5812a","ssdeep":"","tlshash":"d4014e882108c24cca949342c3142060aa2bece84388cc9dd3de5e0f3ead8281e182ea","first_seen":"2026-09-25T05:44:41.813916Z","last_seen":"2026-09-25T05:44:42.63529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/google-pay.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.353Z","timestamp":1790315002353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/google-pay.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrJZq4tGALiOkntjxvz59R92gv%2BYdxOIxXEy%2F%2BtQzoq4mJ4KNZm1CxGa9trb8LW87jEAy3XyY3Yl0cMqYmZC0dfxhOf0xqBn77GDgna3CJ%2BrBB8zguvPWgLTpJ%2F99A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd2eb1b8-OSL\r\ncontent-length: 1350\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2997,"size_decoded":2146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3241ef064800b9a22c6dafd1113d44e5","sha1":"8b218479961b9529990aaad1a64d767f8f9cb243","sha256":"560e4c98664c806b53461915ef5816c4173559de2980e3050e7d15b51dcce3bb","sha512":"033c2b2a6e99c79b131850a0f41e8400001c09de45c3c99346d571ff06ad7d2e441fc50fa07f5849733176f825972a4c92cb829c18d0bea98dba5e30665d72e6","ssdeep":"","tlshash":"c45182f5b2d8e1a0d607a7f4e20720f8695f24f3b752d3829190e8d8bd504554c9ddeb","first_seen":"2026-09-25T05:44:41.814973Z","last_seen":"2026-09-25T05:44:42.634644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/f\u0026b.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.393Z","timestamp":1790315002393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/f\u0026b.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uI6cEjjRMAV1SVwp%2FHxFb1TqHgwAI2iPl8UeCv0xEG8k7JiI70IJKa%2BbhkYLGwuWmV9Z76iMd2713bskIDp3kmCMf1HA6iBvw%2BlOHmUUmHQDaFPdg6GWWvOmUGVuaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd7bb1b8-OSL\r\ncontent-length: 613\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1293,"size_decoded":1404,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f3d49481e0d5912f3239713c7e9f49c","sha1":"010c051030e5251e127ab4c68d4bedb4a2f17745","sha256":"7267781ea78dc21fbd92add33b2c20ad906e89b7733ca9adb568d0877a721b70","sha512":"05c34e48e79a21a877e8a2de1b06ee25f18f8826f39f6c609df59b108c7e97efc7846415b05769f2be8f3b8ae4c3d97f0b960797458349f180fa09ec821e90e2","ssdeep":"","tlshash":"7221e5d723c9d08cc60a1fc8db3615bc36aa68b82f509249618c7eda7c9745f8d8cf54","first_seen":"2026-09-25T05:44:41.816077Z","last_seen":"2026-09-25T05:44:42.647313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/gaming.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.395Z","timestamp":1790315002395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/gaming.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OL4%2B%2BHBSJoHZU1lLmmNzHMXyUwIrqXBCmG8hOwf1AGQZxlv1BiQpBsTOuf9LO8MuiWqZJ7o8sGcpjngwwtISGBxSTU1ef98dbnXE%2FLFrbuGYHeRBOaiFVCNXTo6ALw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd7eb1b8-OSL\r\ncontent-length: 482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":969,"size_decoded":1273,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb3a2f5ca6e02fccf802036b8f78f7d9","sha1":"d50c738fadc66f98379e37841368574b3d76a32b","sha256":"ac55d98acdd062f4420e041923b259fdd9882e375b4c6f2c786925b4771fde8d","sha512":"9d1b0f20556b7d9d88651c149a2a3dd974236bbcd09873fa9d8491a2af2837f268821cc6e608457e7f15af96179c9bc9885c2410aff611278ff15165dd5ab3c3","ssdeep":"","tlshash":"ac1154e072d843d8690e9310dd8a993c614fbd276f68c24ce6446ccaf46d12d049c248","first_seen":"2026-09-25T05:44:41.817499Z","last_seen":"2026-09-25T05:44:42.595136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/endpoints/user/version","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.400Z","timestamp":1790315003400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"POST /endpoints/user/version HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Mid: a5646059d1744c399f5e2a63788eb1d5\r\nLang: en\r\nX-XSRF-TOKEN: eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0=\r\nContent-Length: 2\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003; _ga_PNKDMBYNQ4=GS2.1.s1790315003$o1$g0$t1790315003$j60$l0$h0; _ga=GA1.1.1384861762.1790315003\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.33\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48bbXI24PSCjRM5c3oLaspobmvkzdY1RhTDtSpevgI%2Buz1ksSUZJdSpwwD4X0biilBGipBBWxoSnjxaijTzdIJOMnIxB5LpggYX3BWvPh%2BQSTYXRqyBYppuznQSg5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6034ea7b1b8-OSL\r\ncontent-length: 803\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8594,"size_decoded":1514,"mime_type":"application/json","magic":"JSON text data","md5":"05907a9b963de338d7c4d839a31653bf","sha1":"4729e752c6e9ecd8369346d5248702f0ba127d77","sha256":"b33b35590d568d099802173ce8a2b5c61001ad0127869a280cb21bc968e039ba","sha512":"e414b30aceedee0058edcd7624085bab95dd4431754ee210197d7ef6c69f1a7e62ac246a9e369199163c11de2e6649e4b504bcb3f856e6d0daf25de870c0ffe7","ssdeep":"192:UJHg/Vg/cslg/alBg/1l/g/cl/g/2l/g/ggg/PIFyg/n1Myg/SVIFyg/l1bg/n1k:UHg/Vg/cslg/alBg/1l/g/cl/g/2l/gq","tlshash":"ac02b618e3aad983588b63797ad605086610460f78783e81b1ecde5d5fd848e183dfaf","first_seen":"2026-09-25T05:44:41.818564Z","last_seen":"2026-09-25T05:44:42.572596Z","times_seen":2,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/telegram.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.338Z","timestamp":1790315002338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/telegram.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lrFAWeCXcszLaCgyK64eqWmj%2BWRo%2BVz5zCU3NUHanwWNTBbsp2TzvawRK980twtTl4oj7yC0HPvU%2Bonpqx7FWBwqCdG4kvAz%2BX7qi5woeoQ%2FW7JzXGFMhKjoVHSLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fc9d20b1b8-OSL\r\ncontent-length: 449\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":854,"size_decoded":1244,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e0ead0be7c4b2eb8b1b952761a20b6e","sha1":"4ed76e89de75c48ea83f37db6abaa46a6b679b4a","sha256":"36216879a44a5aeba9a51ccbaaba5133331f5af7a4cb53c60804b88a1536066f","sha512":"4885c4621b642415cc99b155f2ad50be448db56544c4a16c3cfc8ef081ca0c408442e544b8b4577c4eaccb811c40b5d61530436a604f1e5945e760d8f7a9b541","ssdeep":"","tlshash":"ab01ab21f3e8945b911dd359274264e491b8b3e82f4cc68ce9f6ac2cae0e15d96002e4","first_seen":"2026-09-25T05:44:41.819977Z","last_seen":"2026-09-25T05:44:42.638422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-starbucks.DFSwtF9Y.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.372Z","timestamp":1790315002372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-starbucks.DFSwtF9Y.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RYiBuFfAWvpUsdQjIojW3BAxM%2BLWnLPHX8amo%2BgyELw8FNmKeFQN6%2FFUssAsLGHLYPyQTOUQcYjO47FaiIST2i7bZtZlQMTYYR4FEMwk2rcMhVvjy2h9tL8jbCYxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd66b1b8-OSL\r\ncontent-length: 10813\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10813,"size_decoded":11557,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced","md5":"47a31ccc56c84c104913d0a72255b842","sha1":"18c3681098ae4ee71d69df9d8fb0d0be06f0ed8e","sha256":"65b150b2b3698c8b9d712e4423dfe197fee54cc6f31e24636e4bc4beca6bc31f","sha512":"02f56e82daed6d418855566b061ef9d082fd1094007a39d574955fbb0e3f3a9ce685e643c4a6f6063ec3544ef6acc6d17dca5acc360fb769381f554eaa47c727","ssdeep":"192:skUfp8cxd+eoM6ssAXPo8pm4zTKhfW2QCkbCZPz4I3tFs6UnCzLQIaBIhc:/Ufp8cxcwoWzeWrbCV3Q6UnCzLQIeIW","tlshash":"b322af7236ea2b02bb47a4755ef16976ccd5584da4da332e7d1ec8764b50183343182a","first_seen":"2026-09-25T05:44:41.820989Z","last_seen":"2026-09-25T05:44:42.574645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/logo-fifa.DwAqe4iV.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.388Z","timestamp":1790315002388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/logo-fifa.DwAqe4iV.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUZmUjqopuRXDgrFGdsno9bRsc8W61wmvqO2fgJ7RFItvgLC3FFd98eb8U%2BDd%2B14%2FJiKvW81aohtIq4DRY3uiYyeb2DGenpB%2B6f%2B48%2FTaM2iC7KnhYnFA3OM1wbC6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fced76b1b8-OSL\r\ncontent-length: 16955\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16955,"size_decoded":17705,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"4f6e00b3d571d8ef2355705a07d569c4","sha1":"aa972437a0f48e463ac2e008d52130fbc372d811","sha256":"427f7b1b6c175f41af2e0d21ea8d6d88006c82f0c48d68b9f17244979ce6277d","sha512":"b3ed1f34438b08141a4b9ac3a68527c320c5fbea86d968f4beb76774778719a4b17b5755f40319de4e9ce093732b710ea092eb7235ec4c8768ca2322f581d745","ssdeep":"384:Fn31Juyli63+LO8PisNe1P7wZH8Ti+W15ToDqW0lSfm:FnluWYOsW7w+T+T/WeSfm","tlshash":"3372d0d3fe8115b86f7a4685b64fef68f81e9c682b906cac9c84775132bdb184ad0431","first_seen":"2026-09-25T05:44:41.82207Z","last_seen":"2026-09-25T05:44:42.558086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/six-bg-1.BC-tWN-I.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.976Z","timestamp":1790315002976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/six-bg-1.BC-tWN-I.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.DqNwwtWe.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vf2joLpsCYNwN4Q%2BYZhVLkJ71WGiWcl67HEIk0qFBH1qfuE5mqLE9XXcU8DgtTx75WfhbSUd%2Fh%2B8zvLORF5c5atSPH%2BbZ%2FJyBntctpld0AlsD3xtOEtMLR2bwV6Uvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e48b1b8-OSL\r\ncontent-length: 60200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60200,"size_decoded":60949,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"861a6ec0b3ad0ea14c47bcaa137d48aa","sha1":"4830381c4761aaf95bbdfc6edb29a72343605dc7","sha256":"a8aec0439381af1ef2dc1969fb889a05a24e228370a89e8f3579d8f18d9cda9b","sha512":"9b7948494b90c61ca01e49363e7d4597c59413c342a198dd7185c0dce5f0636968cff03a9aef4a53077f8215a8c94c685bdfc9f0c9aebd374c3ee901fae02c3c","ssdeep":"1536:7JCaXV/tQM9MWEgfw7N4kNf1B0fWQYEKeG9o1jLR0M:lNxZfw73Nf61+M","tlshash":"334302796d801323bac85e485c2975391afa2c7fa7472425394f80ee87f14811e3bd66","first_seen":"2026-09-25T05:44:41.823096Z","last_seen":"2026-09-25T05:44:42.581862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/logo/logo-full-light.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.395Z","timestamp":1790315003395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/logo/logo-full-light.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003; _ga_PNKDMBYNQ4=GS2.1.s1790315003$o1$g0$t1790315003$j60$l0$h0; _ga=GA1.1.1384861762.1790315003\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxWq7b36YjOworKjq6%2BXSr%2FaKchrelbBAjVtsQ%2BtQS2F1IG4CTAXIBJxUs28Ar9IZ9ntmv8f84Rr%2B122d9tgBXqpm8JzoG%2B5w4zaLwGKGML5DwSMJHYH5u9Cb2lW3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b6033ea5b1b8-OSL\r\ncontent-length: 2494\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6360,"size_decoded":3290,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e550f05792a32f69ec82074e35c3ca4","sha1":"a248c295ff8cbf9e46d34e8701ac1246cde139fb","sha256":"aa73a678f209f26651db37910b753ac1ebb5a49d41e7df7c58680fc6de4457d2","sha512":"269941ed0bac239379f2402b04563f2c4660a0f10e509b762c14246f1277c0753a08bd31ba32d5fdf9e6bedd3ed84675b6f01ac0b93ef5fa4e953f025c22db49","ssdeep":"96:N110hZKzOgvP2y64pFBFmyV8QFmtyUwTOeg3hd6jjV+jhuMVgoYLMpDbc:N/0aOS+yLmkUwTOegh9tVY","tlshash":"59d195dda7ddb3d0e506e3d6ee3610b5ea1f60f52f814ea8c3895d65fa4408d8a49c80","first_seen":"2026-09-25T05:44:41.824246Z","last_seen":"2026-09-25T05:44:42.648188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firebaseinstallations.googleapis.com/v1/projects/redotpay-3c4c4/installations","fqdn":"firebaseinstallations.googleapis.com","domain":"firebaseinstallations.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.119.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.491Z","timestamp":1790315003491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"POST /v1/projects/redotpay-3c4c4/installations HTTP/1.1\r\nHost: firebaseinstallations.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://redotpay.st/\r\ncontent-type: application/json\r\nx-firebase-client: eyJ2ZXJzaW9uIjoyLCJoZWFydGJlYXRzIjpbeyJhZ2VudCI6ImZpcmUtY29yZS8wLjEwLjEzIGZpcmUtY29yZS1lc20yMDE3LzAuMTAuMTMgZmlyZS1qcy8gZmlyZS1paWQvMC42LjkgZmlyZS1paWQtZXNtMjAxNy8wLjYuOSBmaXJlLWFuYWx5dGljcy8wLjEwLjggZmlyZS1hbmFseXRpY3MtZXNtMjAxNy8wLjEwLjggZmlyZS1qcy1hbGwtYXBwLzEwLjE0LjEiLCJkYXRlcyI6WyIyMDI2LTA5LTI1Il19XX0\r\nx-goog-api-key: AIzaSyCRecYEC-N8KUvBLvKnq497EKlOKlWHuBM\r\nContent-Length: 130\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"fid\":\"cQljbPI3jh1diRW3u4AnS1\",\"authVersion\":\"FIS_v2\",\"appId\":\"1:692475463910:web:2d8d527af0109584f55327\",\"sdkVersion\":\"w:0.6.9\"}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 25 Sep 2026 05:43:24 GMT\r\nserver: ESF\r\ncontent-length: 487\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://redotpay.st\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":623,"size_decoded":978,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5157533c07b62a5bafafa24be5edc312","sha1":"9ab47b55c51e05943d6c8e22d89aa7347909ab2e","sha256":"23edb45ec8124aa0992d3e9718b1e50436cc41dcf55eb1f98605ee30ec84fde3","sha512":"60f42393bf96a621c57d4ebf37cd5b7adf76c8df294b25cd11024d24d0ef4237fb4530cedce981e558cf456964dcb0f2752f64bae4654069e731438544c2e525","ssdeep":"","tlshash":"14f0687bd1fc8fc795d0c22c00054d41bd170c06381a34657d5573dc675c51b4b23202","first_seen":"2026-09-25T05:44:41.825305Z","last_seen":"2026-09-25T05:44:41.825305Z","times_seen":1,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.CGP_oHug.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.297Z","timestamp":1790315002297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/hoisted.CGP_oHug.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqO0lJcsZVwJOpwjS8M63ts%2FPkgQIww6ET17rN%2FiezJwbj6UbzHL%2FUqD2GCS7vxEYTphPL7Z0dPwefu4vZx%2F7TsM1jkRVfBDdMS1hn19Lf1lrQtREeFwUymozLBLSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5fc5d12b1b8-OSL\r\ncontent-length: 3455\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14419,"size_decoded":4261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (644)","md5":"0c7c391fe393894b76abcb5a2fe0601d","sha1":"0d5d552a08bd99fb9b17dd1eecd1a4e824784415","sha256":"aa9f22d078ca4429a909cce23156fec9d86cdc019fccd28da3d7c3eb04702610","sha512":"716c7c1f35986b4bebd88aa0064b7bd4bb5fda46766bbc9edc6abf51de9cb8596716d633221492761c899973f78e76d4fafdfdebd3cf9d2858c8ddab07ce0846","ssdeep":"192:a6ALCIlLZDlZHxm5ro7FZn2xN4OrxNDgA2XARJQZmr7fxRNaNZg/jJVFk2C+2u5D:a6iTLlHxQgFK/xNDv3fxRN4uNVFkO2Hs","tlshash":"dc52832502f0043901ab65ff46dfcb843a31009bbd6a6d65392cae8d1f4907dd2f87e6","first_seen":"2026-09-25T05:44:41.826242Z","last_seen":"2026-09-25T05:44:42.584125Z","times_seen":2,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/card-2.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.362Z","timestamp":1790315002362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/card-2.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQYhpAwWip0mPOQRtXDx%2FrVXAVaVjY8RFJ5W0fgEqu3C93s0iA9IEvkZbhRBMpCa%2FYkLx0wMkPQ2qMSGpSYNTB1yMVwKD1lwSAJEfL%2BNqZDmGS0e2MFvQaMEHlhYyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd39b1b8-OSL\r\ncontent-length: 4729\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12210,"size_decoded":5521,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"440883b21cac8f1072b51f45c35f0863","sha1":"e803b2ecfe9edc9038cb56f5efcd88cc1c3417ed","sha256":"e1a06e8faff20f96840316faf5af829d4e2b29178cec23a29b4c7fbab92e4ecc","sha512":"b411122aab84b9b546c08674299bb138530e3af8a361d68ce6ecef1f457f0c1f968bb27f964af9196fb9920f1192e158aee99da9836382947c8f7be75dc958e8","ssdeep":"192:L1hFn6SDtASbkPSQPXsiZnE0u1CDQi3H4nO0tP3co5o/TzlVct8G56M:LBXZANLE0svi34OcP3p5EcyG5Z","tlshash":"924209fc17359efaf6c5e3cfef0281693506a2b2dac68630c2586f592455c98dc06dc2","first_seen":"2026-09-25T05:44:41.827399Z","last_seen":"2026-09-25T05:44:42.644295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/swiper-core.FUSIrotR.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.742Z","timestamp":1790315002742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/swiper-core.FUSIrotR.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HU79LRvgMTenUpaTc5TnyJC9SHpUfDEt6U0CdrnCx4nNBR9%2B6RzZqkRPW%2BzEwPtinISupmf4lTcWURFlBFp41sHaoxSbTthkkuLl7KdJ1pLIoJyjbqbCvZG%2BVTO30g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2dfeb1b8-OSL\r\ncontent-length: 20960\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":88623,"size_decoded":21765,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (634)","md5":"3343c8e634309cf96ddd2ddbe0dda50a","sha1":"a8e97492f44c62411f5c81de1e054420fdf36799","sha256":"2f40ec949e50b28ed00d8985911a832b31128b64fbc292d35e08a8edbe0fbf82","sha512":"e7a1dbc676128017123072e6c7d58282dfc8a5ecb25cd379023cbdb7ad887754a2ef63f2d3a1f4c6d4612dd4ef109ab8140b9660dedba4b123b43f983d1f7455","ssdeep":"1536:Bz1XwCupBBqD6qq97q/4pFCDIa4v20mMAKbLn5PBtOTJa03p0rVc1sY:/Xkxp/a4vQKbLnlZr+1z","tlshash":"b283a20652f225384283a12f4b5fc91073baa4477e89ec983a5c46685f5d83c4bf9ff9","first_seen":"2026-09-25T05:44:41.828644Z","last_seen":"2026-09-25T05:44:42.567112Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-PNKDMBYNQ4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.289Z","timestamp":1790315002289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-PNKDMBYNQ4 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\nexpires: Fri, 25 Sep 2026 05:43:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176300\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526003,"size_decoded":176904,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"e9693e6f7774937df6f5d3dcea0ccb40","sha1":"c658fae226e73f1dcf11a642eacab6fab974bd67","sha256":"7bd384f46572d0e3bde319535d9b457bd10920fa6349e5d4a2a93879aa8e2a0b","sha512":"8b4464a04e0e94b7d979ed0f4c3cb4e3edeac792894f5c37221d43976f9eca0097619874dae95b95520b7095c3dc80cd566f531e8725eb4b93423cd7dd0f901a","ssdeep":"6144:2dlcM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9HJDLavOo9jxHR4Qsg:kMp7+//0hBP9LRo11","tlshash":"08b4f7ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-25T05:44:41.830206Z","last_seen":"2026-09-25T05:44:42.573266Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":58,"receive":44,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/card-3.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.363Z","timestamp":1790315002363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/card-3.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEH9weBvdQI0coeMZzZi%2B4EKmmou0LBY6FCX5Wd0DUayo3x5tzjdYDW6X7VByMSa0cY513U8fX8h2N4GgiwNWv0YcI4wOL3oJKkUZb62hM6%2FtK0bVAU%2B9miUb3673Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd3ab1b8-OSL\r\ncontent-length: 4669\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11836,"size_decoded":5461,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80ec3aca022daf3cb5f7a42e6026cb5f","sha1":"e91604c0e809db833dcbe0a2b1f4b4f8ce7e0408","sha256":"2a49c2a8da3cfd0b99dfd7d0419648ed3811fe64a9ba7b445ea655251b0a0ac6","sha512":"edbc9e6cd2724f35283b617a32c006faa31757fb7fcf5b4ff786d75715c0f2d2d5e38ce1a5acc1bfbbcc7d4cc1818c09bf00e8a307a8ba177828248eed0e64d9","ssdeep":"192:QcFUQxXSh8pCVgM7bZEaFwLxNjrm3vVohsHN+9m++iWTDff8YVp2wffXWdK+Mpv0:Q4xCh/SMpwPj6WhsHiWdX8SpXfXWdw50","tlshash":"3f32c7fc67685ff9f980a3dbff0285b8390a52b2dbc58670c3545e2c240a958dd19ec2","first_seen":"2026-09-25T05:44:41.831178Z","last_seen":"2026-09-25T05:44:42.616444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-15.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.390Z","timestamp":1790315002390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-15.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQz2uh59qj48G2UhlaNIauYTYgHB60o6eAHQyESrP%2FRC1WlxpCUZbj4zxDWV%2BmaM3Lb3lg0yTBZhPo54JCiIKSJVKdVhNQN6VyyvprZdpITeeRLRO3Kh4CQE8FUHuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd77b1b8-OSL\r\ncontent-length: 481\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":910,"size_decoded":1270,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30e8abfeacb72a18dd63c2c6d2aae9c4","sha1":"a8a3aabda0b32e4de69c10105cf17ddb0cd3791b","sha256":"3af234701f1e1410c9abd13be4c17eca7fd3a9d4402558ed4119ca33b6447407","sha512":"48a4d8d2c37a8d203e7548f515152f65a004de3e8bf08f011375461be07a5c2e7f6779a6789a40cbe8b32c4a5f9ef65a4e7544b2953a4b459840a0ec0b74d13b","ssdeep":"","tlshash":"fb1127d0b1dce6444705c7610b1e346553e9a3f11d6cc48473196f66b81909f2d593dc","first_seen":"2026-09-25T05:44:41.832553Z","last_seen":"2026-09-25T05:44:42.597716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/fourth-bg-5.CAZjTlGe.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.974Z","timestamp":1790315002974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/fourth-bg-5.CAZjTlGe.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Kg3JdTOI2cbQK%2Bc5S9zf0tPWROyOqXERa%2BR1U%2FIUtP%2FsJYV%2FdE6wAe8MC8SUD90lNgX9oKtbpa%2BDGG%2FDVwqcxzekejhjnNAJYqDRWGST6Ow%2BNoiDhI8HcOxmao41w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e47b1b8-OSL\r\ncontent-length: 103762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103762,"size_decoded":104518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41234e1a3f444920faea8fe26e732731","sha1":"cf3b138557098872823c38849aac34d29d73cbd8","sha256":"e608e9d63f3de209d246ee4b5eb4f10b8aa20ffc1c1c3ea97ab02f7281c8ee97","sha512":"6023cbd2e44e3168a2b167117815a85ff5d1e535948ff44f3f867606562fcffc328151f34f8cb80a9017085d02090e0fc8305486e6e1cdc208bd9ca770e603ef","ssdeep":"1536:+JJr9x9wNJIJlcwNLUcbZIjbX/AvVf25ZT1+I1HUx2+72issY/9XnqkbvD:+JJr9EMJl74cbKf/Aw5ZT4IJUm/93qY","tlshash":"cba3027f8fa2278fff254278dde0c75552875f45ef3436c83a789470a01ea4618a24ea","first_seen":"2026-09-25T05:44:41.833846Z","last_seen":"2026-09-25T05:44:42.658372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17678951126","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.286Z","timestamp":1790315002286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=AW-17678951126 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\nexpires: Fri, 25 Sep 2026 05:43:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 155762\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452600,"size_decoded":156366,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5162)","md5":"0ff5f149ac8547b01de65333485eb529","sha1":"fd4e053582a56c4b10b10dff499a075fb203e3d0","sha256":"8248d7f6132ed2e7b6986c824e2a44732ccc3d8a2293653af4dc91490d0c1a64","sha512":"c6f2b697462a66c83add8fe01913afbdf5f3fd687e0dbd9d1bef24c407f61ffa0d96ef5ef54bac68319f560ca9bb3473a74860c2a5bff40c044901fb6b4da76d","ssdeep":"6144:KcM4RorWt5MDZ+5cKI+IBOsFcjvgbsED/3C9lNGavOnibf4rg:X5/u1QBNERin","tlshash":"86a42acc73d674229392f678903f018bb67a69a2b44cc895f289dce42d3465a9173f7c","first_seen":"2026-09-25T05:44:41.835395Z","last_seen":"2026-09-25T05:44:41.835395Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":43,"receive":51,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/circle.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.409Z","timestamp":1790315002409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/circle.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAqY0reItUnOeFn2mq8UK0BhEEujHWPgXCkC9kiH3wMFevm8ppluyM5VsSVRd%2F2DZNGAUTHXqdNpU78HZaBsJM%2B28gJfUzFYiK1tjjgDfxT3w2Fhxlug80ZJeipvGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd1d8bb1b8-OSL\r\ncontent-length: 9371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9371,"size_decoded":10114,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"caf0838a2f71fe949d215f652b0b26d5","sha1":"bda2eb98a54ec41b6ffe6dde8c71b740ef280d5a","sha256":"72d7dbf01eef29dfdc92b2e0d18f5268d9202654cc09d9c9977c051343c49981","sha512":"43ac583d025e550a0c97b441b34631d7ace84d75a727d5c6784d97d70ec2c9533304edae93f5bf4d69437fa231986fba9cf68f59016cbd9623c19e7f784ffee5","ssdeep":"192:7zeQCnxICuSbXhG0UJWo+TXG+hp7RmgZSJHcGj46A78AEUHFluC:RCxoS8pWoyGIm84c24/r","tlshash":"8a127ededef809926dd81a3358c82a1c4be5411b4beb7c9fdac671001c1263a576b4df","first_seen":"2026-09-25T05:44:41.836509Z","last_seen":"2026-09-25T05:44:42.591555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/i18n.CZntofie.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.140Z","timestamp":1790315003140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/i18n.CZntofie.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/FAQ.BaV9valr.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D; _gcl_au=1.1.1757129313.1790315003\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiV0MuzLrLNWs%2F59cJQtk86NlZlma0QGpH835E7nnj%2F3QKnO4ItQ8UdA4Wf%2BccWvuG2kMxk4xD7zTfGPgLleCpM9GwiHZjRs%2B3Ycg7%2Bq5kK%2B3NHywojsW7mPHPcFyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b601ae78b1b8-OSL\r\ncontent-length: 12386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":45816,"size_decoded":13197,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (846)","md5":"1beea8383573c8e990a1a5bd1a4dc2e2","sha1":"ef8045dc5209a759ec73e7c36b20df55ea2ceb79","sha256":"1c40dd3ec5313c3ce1247a1f4320e7ab85f3bb06874ba3e6f78bf1c2d6174be3","sha512":"505918420c239738d733850b2b5a02034115a1fa320bf59a73952fa50f729bcdba3817574f73b184cb9e59d5c457a4dfc14faa45224c2922b7a2246fd34638af","ssdeep":"768:iZIkCTecNMKEFUKUeSqYG4/dm9n2O0/Pnnw4lGrQ3hikPS3DI:imTe2EFUKgTGsISPnnx3hiT8","tlshash":"6123d35e421a15ac00c60b46f1962956d6484e5bcf44b822bbad83351fee80ff3fa77c","first_seen":"2026-09-25T05:44:41.837761Z","last_seen":"2026-09-25T05:44:42.590223Z","times_seen":2,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/icons/right.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.331Z","timestamp":1790315002331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/icons/right.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhUPiWY7%2B3GbPRDfC7kr7Rvc6Iv3A8OwWV%2F1%2BYr3FU9jhcMzHwAmjwC5MdQr8QNiUWYywP9%2BUNDUe02yCgvJGF%2BLMmeaN7WQxET%2BXCWjmo0PsypSsrvOBMYfL5MXqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fc9d1cb1b8-OSL\r\ncontent-length: 372\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":372,"size_decoded":1120,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"72787f4601e84f24f156c3456b028b13","sha1":"14671e98d7ea58019be8d93f3eeade796abbe806","sha256":"4aaba4bdcd143404264cf32c94d67a3e94ce60cedfd51b51cace376aa844b54b","sha512":"3e409e110560bb267e2546e7d922c02d678168a9b3f5ae4059ea65870b08256a546420a138dec8882af1794c02dc7d9c34a84364e2f1fdfb9d1b0a6cf8b9309f","ssdeep":"","tlshash":"cee0f8bbabac603283ee4422c02808508e3a45cc868ee30e1a63a64702033c8808a226","first_seen":"2025-07-08T22:30:09.885638Z","last_seen":"2026-09-25T05:44:42.589348Z","times_seen":3,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-4.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.375Z","timestamp":1790315002375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-4.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GW0RJMLKxEccgvz56qTTzcb0Zi9iEI0wdzfQXeosWcuPsPbhdMexo6poY%2BaZBy9jm%2FbXjqiR2JtPBh2xN%2FUqtUhxRBcYPgtqkpzuq8faeR1t6LRCqAdifJe%2FvaKPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd69b1b8-OSL\r\ncontent-length: 592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1118,"size_decoded":1385,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d32a1df8c27d6136b2bd7e4cf7852500","sha1":"8aa62bfa5d009a4ffe28062c035d34020a569a4c","sha256":"900176e6d7a8c558728f70cdfe5bf7b36dc3459cfe678aedf2657dd9016d0933","sha512":"ff8777715bb3dc93c98363375bfff2aab487d38cfeb066a21e27e4b1b9e84a3278761f09bd2935c5248cc2da3ef580da2f774e66f30ec4c488cfff937c1cc5a8","ssdeep":"","tlshash":"6d2160feb1dcb2858486a360e1374ab6820f68f373cac604b08d98e8dc0a244cfd455c","first_seen":"2026-09-25T05:44:41.840615Z","last_seen":"2026-09-25T05:44:42.604524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-16.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.391Z","timestamp":1790315002391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-16.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37cSNMK%2FbxxDlxHRKmPA2fZ9JCv4WKcENz6dfSMsS81F06UlL3ygg8SY4%2B40tZWoIdoAtaDfqwPCdtC8FpyptdOcV6d3B7rah9OgYf3rZvjWt%2Bjay6WEXIWt3B6zMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcfd78b1b8-OSL\r\ncontent-length: 546\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1151,"size_decoded":1337,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b610880479f2edafdee19eef5b89089","sha1":"d65943ce7d1db0d32b4346c333496e631504c5ac","sha256":"68cf1937e7cb481cb546e60c1563208d2f664cca474a9aa869b457834b7e5559","sha512":"0f92cfb735bea8adff436f0bd545067c1dbeb545c0c493a4fed44fc6f8ffce7b1528473058624a0940023ac28adf95e28a1ad7046209219354ee9b1cf9a1660f","ssdeep":"","tlshash":"912166f7f2ccf320940387a5114e703a26aa72f507ad551cab501d49f94e0bf6d4e684","first_seen":"2026-09-25T05:44:41.842067Z","last_seen":"2026-09-25T05:44:42.605894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/sumsub.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.407Z","timestamp":1790315002407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/sumsub.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61FvLNuHrYroDND6jLqkdFWl0w%2F1Q%2F2Cuux%2F%2B4W%2BeP%2BtjSQlTvz1imlP4TUSEAHhUI%2FMimionIE%2BMjrwdkqVlFVRyV1vhnlbUboUx0vqndXUHY8YCrpwaFHcKIl2mg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd0d89b1b8-OSL\r\ncontent-length: 5025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5025,"size_decoded":5778,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"90dc31d849c9b4d3f784b354ab984809","sha1":"829b76a6d38f35c4c7e567de5873064a546179bc","sha256":"e3a77c92d6d27429f6c5e1dd80ae33a2fb3118dc06e38c3b351c12d9a523954f","sha512":"f9884d09cec071400169e9ea74b9d212c824da0eb4c6e4c22011777e98af9bb7a12746ff0a95f1d49b74e61d8fce87712e4c149370581123f9a4b49739f35fad","ssdeep":"96:EFKZX58cXr1kYYGw5oX3drONk7cbRvZ5Yoqrg4hgN7pY1tK+:EFk8crCJ5oXthgbRZNqr9M2","tlshash":"dca15c9a4b3f45df6e2a6e480c1c19416f627a67f461e02fec72e30f7604d6b0299952","first_seen":"2026-09-25T05:44:41.843079Z","last_seen":"2026-09-25T05:44:42.558881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.BUh-PYNw.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.737Z","timestamp":1790315002737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/hoisted.BUh-PYNw.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2B8ffFUmNJqFCRJotyctAeQQ%2FNVJK%2FWvgTe%2BnKf5IJLbIRmPRRuFueVqLSjXj3Vu%2BpbZiT4TqboXUEbczm1MXCtL8cxNpDlZwZRzfyNJQEvLanGUjkiyu7rBcs3%2FqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff1dfbb1b8-OSL\r\ncontent-length: 60595\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":288041,"size_decoded":61406,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (341)","md5":"ef1a75e1a8f9cf5628bb54eb4e602f4b","sha1":"f6826665cb5c9208b590b11e28c5e4278311adfc","sha256":"0d80082e4c570afd9d1ff2a1987e226a484c47e60e52cb9345a349eb4ac8f1e6","sha512":"901634ff5af6c2ceb0156ff90ded124a55b5babab221e1ba4e3af5c2551aaccca8f168cb768a1a56f54f57f68e35855077f9a23b4489e6b85a77b44f792a3f99","ssdeep":"6144:pooO0BfZlKFwwLi69iamzyqVDfsD5CoW7Purf8rWRSFD937ioXXJsmIVUapteWbZ:1O0BRYpDmzPVDfsD5CoW7Purf8rWRSFu","tlshash":"5454725976f625324257f0791a2fcc0ab239940b298eee443d1c92e45f5883d93f6fe8","first_seen":"2026-09-25T05:44:41.844755Z","last_seen":"2026-09-25T05:44:42.632803Z","times_seen":2,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/hoisted.PLekn-i5.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.744Z","timestamp":1790315002744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/hoisted.PLekn-i5.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ76w3oAE7XAeLIZAxhntbm%2Bmc7FCsQxaTKJGApezKDu7qeZZWpPYUWrGF6safidBNGOlIhTJ6UVcoDujm%2Fqz2e6ObKS5%2Fe8w%2FhE5JeCvkJh5Hc7ZtZ%2BH6oIj970YA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2dffb1b8-OSL\r\ncontent-length: 132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":230,"size_decoded":939,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a8fb725d398ea3ff8a59b1190836532f","sha1":"31368f6a84d31966cf9ae40d42c474b166d87bab","sha256":"cda6c03d97d27423e3cf7d8c99201b2d722f2a5366cd3b66b184a5b15e1685ce","sha512":"61f0e81310592c4c668d294d4275a97824bf61c3f1530608ae55a88d576d8a3c25ea93eb6f97b180b22d6377f1a38f9bf94767a4aa6c6bf1580ae51dfca26256","ssdeep":"","tlshash":"bfd0c9a3d0d49a0901819ded1e23312c973024b8efe02421f50f1736f75497ac6059a2","first_seen":"2026-09-25T05:44:41.846605Z","last_seen":"2026-09-25T05:44:42.585996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/IconScatterModul.astro_astro_type_script_index_0_lang.BGih0Aui.js","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.747Z","timestamp":1790315002747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/IconScatterModul.astro_astro_type_script_index_0_lang.BGih0Aui.js HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/hoisted.CGP_oHug.js\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LP3UDnZcQKiJYNPa1Hr1bXbYZK%2FXwTNp3BWHPkcK1%2BTfB7q93RQ7xSva7GRu0ozWC%2B1j%2BOWbG63H41BC1q%2BPkjZJLy2OMfbcfVPLugtNcykYB%2ByBfMoc85iPyvWmeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b5ff2e03b1b8-OSL\r\ncontent-length: 248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":691,"size_decoded":1057,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (380)","md5":"7d54f4732d805e01d45d7b2bf39d9ba5","sha1":"2c867b8acfec4f984083713b878b93f849055ffd","sha256":"833370bc714203c5368a1a8040ec3b742923f8a9729c80ebe5e3e8b0e1374aaa","sha512":"8983cfee913b662e9fb89d6e6f1970bad58eed3980dbe8d0b82bf950eb8f545414abcf2f178c1e5563fdfb2835e88608004affe089654d4a5d245d5768c49b5f","ssdeep":"","tlshash":"1801df1512e5c53812ab16cdc345dbeceeb014fbedc69db70259a19e6f700aa03211e2","first_seen":"2026-09-25T05:44:41.847746Z","last_seen":"2026-09-25T05:44:42.611002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firebaseinstallations.googleapis.com/v1/projects/redotpay-3c4c4/installations","fqdn":"firebaseinstallations.googleapis.com","domain":"firebaseinstallations.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.119.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:23.857Z","timestamp":1790315003857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"OPTIONS /v1/projects/redotpay-3c4c4/installations HTTP/1.1\r\nHost: firebaseinstallations.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-firebase-client,x-goog-api-key\r\nReferer: https://redotpay.st/\r\nOrigin: https://redotpay.st\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://redotpay.st\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-firebase-client,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":529,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":12,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/six-bg-3.C_A7RsqH.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.978Z","timestamp":1790315002978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/six-bg-3.C_A7RsqH.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.DqNwwtWe.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13EFbGMKnmDE%2FvV8vg3Z0sb9g0idJrJzsPwtlHKYzAxN1afS7OpgkqlSInrVxtD0NgCKtHTcRMzsp%2FjCBLnTYVapCcftjoTVvsoSx0gZiooHWbTzi3IWjsMbY1PmqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e4cb1b8-OSL\r\ncontent-length: 16780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16780,"size_decoded":17523,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e952757dd39bc29cf7b9053586c92e2e","sha1":"72d8ac7e154a7afead50f90211a4fe25ec7a1dda","sha256":"5ed2fda9278f9721efb320939543d5c518c17d90de3cb657ee92aa64cf95dd9c","sha512":"ba066f4fe376e40c5dc87b9bf7b107c5258f0c82be36cb13b344d8655013c3cc2c0b4d44ee1c28f58489aa80b53d1811ca9a71d7712e347600f22894065fd3c1","ssdeep":"384:lVE57M+B3kRBENKlQ4LKlNh5jq1wnhEfoKf0FfTuNgEpHsM:s1FoE4lQKKlLPhEfoKsRTuNgsMM","tlshash":"be72d1cf1c5c42ad56dbb59f7537e037a2e0bcb101416a94c7c7e13a39c3aaa0906c42","first_seen":"2026-09-25T05:44:41.848722Z","last_seen":"2026-09-25T05:44:42.596238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/pagination.C5riYL76.css","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.296Z","timestamp":1790315002296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/pagination.C5riYL76.css HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVfa3BrXjwmkbvsNQe0nPaWvdnnV1G0LolZafFPucBAB%2Bht6uf2M0Rf7QCuwuwpR0ng8FVmJZzwSI6a%2BvHbQHbGb0Z9lBQC7nOWNrrWQC0Cc89XxDw90%2FM%2B%2Ff4o6GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a407b5fc5d11b1b8-OSL\r\ncontent-length: 3964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14882,"size_decoded":4758,"mime_type":"text/css","magic":"ASCII text, with very long lines (2241)","md5":"cc9d5ec48cf25ea532a71f2231d7ba01","sha1":"0f3ae046b3fac6cd0ec7d9ff4a9a08e52597558c","sha256":"b7c5db838582b1418c660bcde3c61a87386b191029b7fff853e4cbcbd89b4023","sha512":"05f7db89e8258176fe490bf8fcf348cc119bf5616e0f67083df75a1fb472b82109596f1ba59c3f30f2abb09e59a7a5bf375a1bc95556502988509b4ebc181262","ssdeep":"192:/mUJbiKnenNg2J8YeY73Xfi7ueceqaFsX7xXGsJpWjwUDK6RBxbQI0KXHKjTIwIA:eUbeZO3xlVsaRrsJZ/2qCM","tlshash":"d662ba945371181397174e36177a0774e96458c30a87cd39b2c0ad88efba9fc336faa9","first_seen":"2026-09-25T05:44:41.849825Z","last_seen":"2026-09-25T05:44:42.55563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/icon-btc.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.356Z","timestamp":1790315002356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/icon-btc.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZ%2BOU%2FyBSjmFhcnnCmFJNrl9hlPyor7aKaT4EI6sWpDlAEPjg54NgRJ4sv4JzkYm%2F%2Bz4mUzoY3Ecokznn5QtC1AkJb8%2BYFcRxUBrWSVz%2FSTzC%2BgsRd5bI9LeTWqfAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcbd31b1b8-OSL\r\ncontent-length: 899\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1819,"size_decoded":1698,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d558877300e565609605e67972de55e","sha1":"ec08237fbb698191385689dbcf94ee2990a4c45b","sha256":"d1c44400cdf395f022436a5fe851fd5d09f6e767cdd1cef7764a5687e66e9de4","sha512":"6516f67ef80b9d4cc56b23500c0e474b4bb68cedfa21911b4b78c8aadca235573de394456eee25ab5658e517281f231b81fb8326d695b46a28121f80c023c3c2","ssdeep":"","tlshash":"2b31b5aef3a4f1e8e905b390530668b136667cf9770ac424d3c07e44db2350c489889a","first_seen":"2026-09-25T05:44:41.851695Z","last_seen":"2026-09-25T05:44:42.557276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/fourth-icon/icon-3.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.374Z","timestamp":1790315002374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/fourth-icon/icon-3.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXY1VqKphB5hOQSxdj2NDzwWLUiRMv9Orv%2B5mawN2y2BRHUWgvDdIGBvNNuZfZ9pu0AGJ3ZILcqDlGi%2BvfNofJvB6BSGpnGt4HXeD5TZyQqHqHprVMnV1XDoFQ98IQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcdd68b1b8-OSL\r\ncontent-length: 1218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2595,"size_decoded":2008,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f71869db340dc81726eb364cdbc6bc4a","sha1":"8fde739bf09e03ac476735417c2a276f23caab29","sha256":"0e97ab6a7d980a8a5da9c51d7e7119cfa0b15501fcaaa32c7574b2c2740324c7","sha512":"1e4a7eb1858e44a56eb527f19b93b558bc6e92dc1bb22b800653fab1b25b054dbe9ad72d218f929b31cd2d65b5a85e5f4e2457384000ae7564d210586cc3653b","ssdeep":"","tlshash":"bd5166fbf384b3f05542d76099224db5780f347ef76d97899188fe80671615c82acc50","first_seen":"2026-09-25T05:44:41.853957Z","last_seen":"2026-09-25T05:44:42.575198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/partner/lseg.png","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.413Z","timestamp":1790315002413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/partner/lseg.png HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8hhqjl%2Bp7KVpT8GrSjxTj8p5clgzrGkzscI9YxJW8jPCbdeFjI1mPh83KB1dMrrYbAVaioTSw6MzVe1rwUff%2BdK%2FYd4BUqZb2HOJruw6NOs3gUMZ3ryJ6D04YD%2BIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fd1d8eb1b8-OSL\r\ncontent-length: 23848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23848,"size_decoded":24594,"mime_type":"image/png","magic":"PNG image data, 410 x 110, 8-bit/color RGBA, non-interlaced","md5":"3c36638499cb6d809925f8a2f179baaf","sha1":"851ae91edf72c3eef0a8cee4621b75f0325adf98","sha256":"4e05c84784e65f5bdbb5a628f93f9c64e4710a0f42cd770e7a036d1d2abde19d","sha512":"e83ebc1056ecc2b2e09547fe89e1ee0320ab03d2af674b2a25685997167295c39f3efd1541643a456d770e3d76a946ec85097e622975f5b6f385a12451f5ade8","ssdeep":"384:E/XbAJAH3oEGm2NuQMP90qw3BRezkr+3K1V9askKFiXM:EvHYEGLNuQM1H4XCUVoDe","tlshash":"7cb2d0fa5c4b54306172072e4a3296cf185d9c0a6de797e83f064c4ef3d53ae52db292","first_seen":"2026-09-25T05:44:41.855558Z","last_seen":"2026-09-25T05:44:42.559538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/font/Redotpay-Regular.otf","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.925Z","timestamp":1790315002925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /font/Redotpay-Regular.otf HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.pZZ2GgsI.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: font/otf\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOI8Gav23sq6O39HYMwn8yzX%2FbjVcs6sbibiC58BtsSomR5TxpjpmUfGHowZ7wjNQGorwGzpRhTraxkWh5QsAw5XQtGx%2B%2FucfyB0YOgsAN25sl%2BBMFHpEGI3Zge7bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b6004e2bb1b8-OSL\r\ncontent-length: 67101\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":179444,"size_decoded":67845,"mime_type":"font/otf","magic":"OpenType font data","md5":"709a0454eac723c97661be58ae35e41d","sha1":"5aa8155a65cc6465ff1f1635e94d16dd78deb785","sha256":"62d6823274f94b62d0050a15e0bbca2bff059cb0265e73474ef0a313d289a40c","sha512":"00f2e45610c5f7ce5af8b19ffb5b7d415c896b41535e96e7fea53b820df4dce8183cd11b344c7d3a84ea61481001318b5ea5eb8e6e69ed0c862a4da7d786f63e","ssdeep":"3072:E90EF7h9m81gZ9DnbVk9y1Z7iEeIwX6Q/JdH9PjlRQVt7pz:ELFl9mkgZpUyj7gTX6Q/XBQjt","tlshash":"ee048c1672406645da417d7e2c61cffc32f5be096d0c874bb577686aee8b6212ee3380","first_seen":"2024-08-19T20:31:50.606261Z","last_seen":"2026-09-25T05:44:42.599161Z","times_seen":6,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/_astro/fourth-bg-1.W8kArfkD.webp","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.969Z","timestamp":1790315002969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /_astro/fourth-bg-1.W8kArfkD.webp HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/_astro/index.COHxXKR8.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:23 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Qql6%2FqynaV%2Bgc19F8YTDbm9uOMhlcAdq3x5YYUXtagJsbs62zB0LWsFzGh4w9lWSJdCc1tqMjaePQKF%2Bfsye9X02IDnZDyW9OWiJgByGXpSRaEZOkAd0XKOpoqhuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a407b6009e41b1b8-OSL\r\ncontent-length: 99324\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":99324,"size_decoded":100069,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d87836cfd7c9e2bca00be4e0e516805","sha1":"d73551b225cb19adbeed213626a862db14728a7e","sha256":"bc768c3bfe3e1dc4c14de8bc82b9ff148beb1dff2a01ea89e697275bd91bc443","sha512":"302d9e63c9512ca00163fffa9d8255cd64b254a70ed861411b24d0c23470e568235a13c313976ff60171c8b30adb97867e81db6343b3bd61cd28a325b2f21f64","ssdeep":"3072:qJJiJn5BvsT9C3MeI8BZcsCmOck+dz2Nj++shJsE:3zvs+BHBOmOc/Mj8","tlshash":"bca302345b1ce39afdf72e74e4a2369dc09a213517797ab048b01a74d3590998cc8bae","first_seen":"2026-09-25T05:44:41.858341Z","last_seen":"2026-09-25T05:44:42.578271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/v2/card.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.360Z","timestamp":1790315002360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/v2/card.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqhH37flPphDI7zuPAB%2Fks57qa%2Fw4AoTzyv13DH4gaVSsXn7ztefqoiU%2FM3S5KhEBLFxKvV1iU2%2FCLB761aL6AfB%2FNQGvxtKcnsRcYwGDJpXuHXkb4cZvO4tBcuGsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fccd37b1b8-OSL\r\ncontent-length: 4603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11814,"size_decoded":5399,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76d3cef61a465eeb9362167662211cbd","sha1":"ad93193143aa2e503ec8d992d366e7454f46b199","sha256":"2d1ae57157ddb52f78628ff774c7b989d1f8e76d617139940debb5c2dbcd8548","sha512":"043e88e0d62494d13bad8c4337eb5e0e56bd4a32e7c64798d3a57fa40ec6eebcf2cd5fdfec9b391cf4c9ceede4f9ad3c7c6455df6fe2df02b89c2cfb05c287ef","ssdeep":"192:8NJVo/3l3hw5r4IYjo/HEM7nidEFd/3iiJL8n+CPyULP3bFrU/RKFvLb6M:8/VE3Terr9/HPiaX/SiJ5CPfz3bFrU/Q","tlshash":"d632c9ec2b38aeeaf9c4d3dedf0251697519a1f5d7c98670c3289f5d2409c99d80acc2","first_seen":"2026-09-25T05:44:41.85983Z","last_seen":"2026-09-25T05:44:42.621196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redotpay.st/img/home/merchants/uber.svg","fqdn":"redotpay.st","domain":"redotpay.st","tld":"st"},"ip":{"addr":"104.21.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redotpay.st/","date":"2026-09-25T05:43:22.345Z","timestamp":1790315002345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redotpay.st","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 19:29:14 GMT","end":"Thu, 10 Dec 2026 20:26:49 GMT"},"fingerprint":{"sha1":"DA:D3:9B:42:48:4F:37:2C:96:FB:17:94:DE:A2:4D:A1:69:1D:29:2C","sha256":"94:48:9C:6B:C4:15:DC:E9:02:4C:05:4F:BD:34:B7:6B:65:00:92:F7:A1:38:D7:FC:EE:EE:50:0C:11:D6:3E:1B"}}},"request":{"raw":"GET /img/home/merchants/uber.svg HTTP/1.1\r\nHost: redotpay.st\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redotpay.st/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik5EaEtzZjk4UlIxZ25CUTd6SEhsT1E9PSIsInZhbHVlIjoiZXpGZFcrN1MzRXQ4TW9hbVVxa1A2TVQ5aUdiTWtYbER0VkRISVVtbmtVWUpJRXEwNlZ6MFh6UFp5SUVLWG82Zk9xL1djWGJ2b3hER2MvbTRva1BVQ0FmQnBCZk1iVC9rZ2E0VDRDWk42R0toLzFLd0lYbW5SNktVVzZuOC9EeGIiLCJtYWMiOiJmZDU1ZDM3ODRmOWM1ZWJhMDIyYzdjMDNhMzQ4ZGM1ZGFjOTFlOTg2YjQ3OTk4ZGI4Y2M1MjM3MzNlYTIxMGIwIiwidGFnIjoiIn0%3D; redotpay_session=eyJpdiI6Ijl0TWNDOGFVUVhTMDRRWkVRNG1ablE9PSIsInZhbHVlIjoiUWs1TlM2UjJXT0VkcG92TE5SMm1ITkNvN1VYb2pleFVweHo2RXp3WlEvWU1Bb042NFpZSW5tbStEYWQ5QXlzZ3Jld2VhUGI4M2RGbUpNWXdLUEk3ZldmWXBhb3V3WUl4Q0E2Q0k5VmZuNTZySGtLZDBKeVMwK1RZNllCNmpRTkoiLCJtYWMiOiJmMTQ4Y2JlM2FkN2I2MTZkYmNiZTZmZTVlNTU2OTk3NWIwOWFiNDY3NzMyNDVhMjk4OGI2MTk5ZDhmNWQ4Y2QyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:43:22 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 05:43:22 GMT\r\nlast-modified: Thu, 02 Oct 2025 10:44:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=99wAjoWbuKhEtaCbQ7XayoUGXutdn3N%2BKXGfHSIRK5I5FbpQae3uOaHmj3Faxdkj%2Fkcfz8lk0ld0ej8Lqcso%2FInCD%2BkEet18OgW6Fd5tWhN8%2BJTizWuJpXUx4%2FU0%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b5fcad26b1b8-OSL\r\ncontent-length: 1786\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3879,"size_decoded":2586,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e4e84d15ad3f66d45c3351dad9edac4","sha1":"f05e39bed8370810c9ab3e945d59edddffd0f4c5","sha256":"878cf6fc36609e1acc553a677fcb151626956c73b204b09c6daf450e66d8527f","sha512":"0a2329d2ee6694fb31810aca776ffc56ad88a03a0d31a02ddfe33b74b341c0e606600f1166c1c0758b54326265d88de3ee34e58c3104babfd03332d2ec03bb0f","ssdeep":"","tlshash":"0081709d2fb442b8a440b6fcd90019e87a467da2b5418478c3ea2d4fa85909dcf2ac97","first_seen":"2026-09-25T05:44:41.861702Z","last_seen":"2026-09-25T05:44:42.586905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"redotpay.st","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}