{"report_id":"52b1c65a-a6d5-4a65-9da5-b055a67a211a","version":0,"status":"done","tags":[],"date":"2026-06-24T15:19:56Z","url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"title":"Trust Wallet","dom":{"size":2169,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1714)","md5":"8349dd96a38319350926f01d0a3bea9c","sha1":"b58d4fc46574e6688865be81043e3f550142edd2","sha256":"ed6f6e174ac7be29444f8ab123c1c2f53820e177044ece59fdf95d742737d153","sha512":"bc9b0c8a2bf51843646477895f29f99f473adcf8c2ba8995fe11e3f9f532633e1adee117f279094e762c220e5d6a423ac7d856ef977f106cda1c928e987ea670","ssdeep":"","tlshash":"6f412132694d5b2fe12386e699a0f73020ca518fcb8d516cf1bd02b547e5ec6ac3b478","dom_hash":"domhash44c093d0dd62961e5a507b7698772e83","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T15:19:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mail.payment-usdc-erc20.com","ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-06-24T15:19:00.19314Z","last_seen":"2026-06-24T15:19:00.19314Z","alert_count":9,"request_count":9,"received_data":5236975,"sent_data":4640,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/assets/index-BJ-Db907.js","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5cc026cf8f85b7ccfeecdd16e416ced","sha1":"25860a0a20892125e14cc38e15fec67d08b31458","sha256":"a683354fb31433ba8766cc82f1abaf79eb0e787d923751307e22ec8ca0caffa9","sha512":"a182466c2e11859dad12bdcb4fdef28c0fcb8480d1d0740a97805fca0b675bd9e6265bcdb96b9e16360026d4e9666165d18e0192496f12c803f9cbdb2d180f75","ssdeep":"24576:Wy5HLsWUCjEa2SJwTCaScJ+DV2LW8ffcUGdSZA8HukRhcwlnL:WypLsWUCjiSJwTCaScJ+DV2LW8ffcUGc","tlshash":"443541496af620319303f0790e5fd805b235a80b1a8dec597e4c96a49f4d47c8bf6fe9","size":1092194,"data":"","first_seen":"2026-06-24T15:19:06.32574Z","last_seen":"2026-06-24T15:21:06.003608Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/assets/connectors_false-DfcE2qQJ.js","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"importedModule","is_inline":false,"md5":"d466ef6158cb1c350952820431f5f5c7","sha1":"39797d4ad4811af8e6ca8a58be9364772a4920c4","sha256":"5c27193386cb365cf1b560a070eb348db52f682aeeb6f4b49323c8e96694d47d","sha512":"78ca470e64e7189ae763ca7d3341e4c5ec1cb02f57226e20710dbeaeeace8135c695d9ee4347534ea53241948fadb4910df3a1c4158c125cfaa0479840c37c0f","ssdeep":"","tlshash":"7fc02b1080e3c1ec0be31c47210193f8aa1917a4370d0ba4338d0734f5236c48fe4742","size":146,"data":"","first_seen":"2026-05-15T19:23:33.7112Z","last_seen":"2026-06-24T15:21:05.998442Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/assets/index-BJ-Db907.js","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:24.738Z","timestamp":1782314364738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /assets/index-BJ-Db907.js HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 26 Apr 2026 06:40:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 235292\r\ndate: Wed, 24 Jun 2026 15:19:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1092194,"size_decoded":235709,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (420)","md5":"e74fdc862eee688acbf5092f4bed7aa0","sha1":"cacbe1602a9bc7783bc52af9ba938265e576f060","sha256":"eed9bd2634f8b8a6f1f10f18d6ee8b65b0c1a3d4353373aee695417a0cc3b88d","sha512":"c3aecdc901aa5bb243e264afc38c0e1c8a8032456fae019950ad842935ab04c62d7931d7d3a90bd8ac93d9bba8872f026be2fe7fb4651742bf05277211bbe954","ssdeep":"24576:Wy5HLsWUCjEa2SJwTCaScJ+DV2LW8ffcUGdSZA8HukRhcD:WypLsWUCjiSJwTCaScJ+DV2LW8ffcUGB","tlshash":"eb2541496af620319303f0790e5fd805b235a80b1a8dec597e4c96a49f4d47c8bf6fe9","first_seen":"2026-06-24T15:19:06.299427Z","last_seen":"2026-06-24T15:21:06.001428Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/images/arrow-icon.png","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:25.164Z","timestamp":1782314365164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /images/arrow-icon.png HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Jul 2026 15:19:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 17 Apr 2026 05:50:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4640\r\ndate: Wed, 24 Jun 2026 15:19:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4640,"size_decoded":4905,"mime_type":"image/png","magic":"PNG image data, 110 x 82, 8-bit/color RGBA, non-interlaced","md5":"b4957ade183c5592436f8121c66c532f","sha1":"273a88f8f87d4156cb2af17f46de0b0d95c533bd","sha256":"da5f12369c3c516a870cb81ed9d08d9384a878904c9258f1fff3dd188804a6ca","sha512":"7c8baa01725ae3600585ca8a6e4b8ac36706e6877efdb522a842638c0986ae2de28d0e913b1ccec22d85f1dd791669462fdeab0d990232a53b1f5dd6ddb1dc3a","ssdeep":"96:q2BUSX20Y22ycigV8XKAbfbluehcC1f/Pxcl8TIA0Y61SqqR:lNXoZ/VS19uehR5pciTIA0nSqqR","tlshash":"aea18d8320c0c1e9f1ab67e700f801d8b513a9d056d1d3962f0eaff22b189830e32519","first_seen":"2026-02-03T08:50:13.212645Z","last_seen":"2026-06-24T15:26:25.187101Z","times_seen":16,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/gifs/processing-dark.gif","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:25.166Z","timestamp":1782314365166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /gifs/processing-dark.gif HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Jul 2026 15:19:25 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 17 Apr 2026 22:25:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1761320\r\ndate: Wed, 24 Jun 2026 15:19:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1761320,"size_decoded":1761588,"mime_type":"image/gif","magic":"GIF image data, version 89a, 416 x 464","md5":"b05d1ae779844d45d2c400cc79faf461","sha1":"7b3bdd6a011fb695422dff3549c462845d888b10","sha256":"bd2dfad8900be56202f8e8db56a0ff2ba9aacde90cff3b4309b9920dc7411af2","sha512":"85d3cd4ca6cc9c2b26fdaef1fd4469e302be8fc9a2340e717903cc04cfcd7cf3e623e1ff34bfad4514e3c81ed0f8dfc65a1a9cb097de259545efbbd39ca556e5","ssdeep":"12288:lAqnA5xKw+gGXJx+XQIG3hgC79vcfuDVm7L1S2ClutroLcnBMpGdyDoTgcJJfjsp:+MA5vZiAXIvmAVGg2CQNH/bnK55ImN","tlshash":"f825227cb33067b4db1301b4608e54ea48ae587ca7b8566bae74f7d2598c33d7ad4803","first_seen":"2026-02-03T08:50:13.21418Z","last_seen":"2026-06-24T15:26:25.187624Z","times_seen":12,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T15:19:24.166Z","timestamp":1782314364166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 26 Apr 2026 05:16:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 474\r\ndate: Wed, 24 Jun 2026 15:19:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":474,"size_decoded":857,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9be6c64f532bf063e451975986df7ed9","sha1":"b32224f71e8eba4c5547e947338af645ec19a1f8","sha256":"66c07e855f2376acfbc253b7ba9dbf61cb7a48b05a6e52cf2d61587b4ee475ce","sha512":"39e4e9400931b5ffdb96149795d24f53f5f5d7c57523b8ac7594a4a96b8424d5d977700d3d2f63e8cf642c98a13cf21ee958ab643ddbc1aaf66a4103688f2116","ssdeep":"","tlshash":"88f0dc43c481c90ac330077aad90f4145483eb898388add426efa07d59c8b81cebf4fc","first_seen":"2026-06-24T15:19:06.297293Z","last_seen":"2026-06-24T15:21:05.997151Z","times_seen":3,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":168,"connect":20,"send":0,"wait":23,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/assets/index-DXCZXbGR.css","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:24.739Z","timestamp":1782314364739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /assets/index-DXCZXbGR.css HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Jul 2026 15:19:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Apr 2026 05:44:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2022\r\ndate: Wed, 24 Jun 2026 15:19:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9937,"size_decoded":2331,"mime_type":"text/css","magic":"ASCII text","md5":"66022086bf648440bfd301d8c51fe8df","sha1":"8b24b61e2deb286da6125ce3d1fb8589cc7bb24d","sha256":"a88c1f4ba5c2aa47145d6ebffa175782372d40862b46185af0df3d5554fd78d5","sha512":"bab676e311fda8c57341bb251a17cdf248f8554b5921474a2c5b3e2208c87a9135860e5fd7ad6b26483881346c851455ef5fe1e3cf7f40c38a90312f5f610fd7","ssdeep":"192:Sx1dxwzDmX2lZFlsnap19n1Z0g2MgH0exliFJ/x+jEynoOsbt/Eg9VXtFo6:Y/+X13B8txli7e0X/R","tlshash":"fa220d5166b35c89b41b8aa93bfa4745722c7047440addbd7fc472888f842ec67b9f8c","first_seen":"2026-05-15T19:23:33.716696Z","last_seen":"2026-06-24T15:21:05.997838Z","times_seen":7,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/assets/connectors_false-DfcE2qQJ.js","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:25.157Z","timestamp":1782314365157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /assets/connectors_false-DfcE2qQJ.js HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/assets/index-BJ-Db907.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 17 Apr 2026 05:44:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 146\r\ndate: Wed, 24 Jun 2026 15:19:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146,"size_decoded":337,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"d466ef6158cb1c350952820431f5f5c7","sha1":"39797d4ad4811af8e6ca8a58be9364772a4920c4","sha256":"5c27193386cb365cf1b560a070eb348db52f682aeeb6f4b49323c8e96694d47d","sha512":"78ca470e64e7189ae763ca7d3341e4c5ec1cb02f57226e20710dbeaeeace8135c695d9ee4347534ea53241948fadb4910df3a1c4158c125cfaa0479840c37c0f","ssdeep":"","tlshash":"7fc02b1080e3c1ec0be31c47210193f8aa1917a4370d0ba4338d0734f5236c48fe4742","first_seen":"2026-05-15T19:23:33.7112Z","last_seen":"2026-06-24T15:21:05.998442Z","times_seen":7,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/images/eth.svg","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:25.161Z","timestamp":1782314365161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /images/eth.svg HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Jul 2026 15:19:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 17 Apr 2026 05:50:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 426\r\ndate: Wed, 24 Jun 2026 15:19:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":426,"size_decoded":694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"598a4ac8ea2bf18c986eb5d7a93f6996","sha1":"f35bc6b3054f7c067678a3855350b06498b45e5a","sha256":"c9c5ec8271cb90aff979f37c1eac3b76e82a7d551ea96b0fcecf27f315fd82b3","sha512":"b2a6dfff3c7154fdfed25add07223d63873cae4dbc9646a85716be33f46f51249f0552cd95d4b4106912ea4634a5060f8109fc99f53828dafd76859b90469ddd","ssdeep":"","tlshash":"42e0657c975c5abe8d75cbd8ae3cc950613d90c009d0019569850f65471c8e1e6e77e6","first_seen":"2025-06-23T03:35:32.683642Z","last_seen":"2026-06-24T15:26:25.186507Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/gifs/processing-light.gif","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:25.168Z","timestamp":1782314365168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /gifs/processing-light.gif HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Jul 2026 15:19:25 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 17 Apr 2026 22:25:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2364628\r\ndate: Wed, 24 Jun 2026 15:19:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2364628,"size_decoded":2364896,"mime_type":"image/gif","magic":"GIF image data, version 89a, 384 x 480","md5":"622ff2c1c6aa463b18bad9fb632930d2","sha1":"464109efcfa26d2c1e93964a9002aa4123e13127","sha256":"68f6377bad4e62b3621a9b679bc1fefc631b86363bbc77856d07c6760e64f646","sha512":"4853b99c3c464398303167cf38e56057e0f6d95e0a542c3a09b7e9e5d4c12a66c79ea7364ae4ebdeeb78b00ebea39252840c1ee1970b961e8533693631b348c6","ssdeep":"24576:7quS+Q4toBEGk+ozURnCLJK3Jn0kLLhtbnI4CDafb5ybJaBIUBmmEzp:7BtHKBEN+ozwn6K3JDTkDob5M0BrmH","tlshash":"5425232bd3360830e4e675f5645f25e94c538caa16a7e9336496bfef4a4001a2c3ccb7","first_seen":"2026-02-03T08:50:13.192239Z","last_seen":"2026-06-24T15:26:25.18826Z","times_seen":12,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.payment-usdc-erc20.com/vite.svg","fqdn":"mail.payment-usdc-erc20.com","domain":"payment-usdc-erc20.com","tld":"com"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.payment-usdc-erc20.com/","date":"2026-06-24T15:19:25.398Z","timestamp":1782314365398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.payment-usdc-erc20.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 18:20:25 GMT","end":"Mon, 27 Jul 2026 18:20:24 GMT"},"fingerprint":{"sha1":"35:B9:A9:36:6E:68:DE:C9:71:70:B2:02:C2:4F:FF:64:63:B8:58:2A","sha256":"AA:77:6E:A9:5F:B0:70:0A:A9:FC:83:6F:B0:E3:73:6F:0C:45:F8:09:B4:53:08:8B:CE:4C:51:C1:93:EF:B9:3B"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: mail.payment-usdc-erc20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mail.payment-usdc-erc20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Jul 2026 15:19:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 17 Apr 2026 05:21:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 573\r\ndate: Wed, 24 Jun 2026 15:19:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":573,"size_decoded":841,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aca37ff7ea24d01377097e8dab3a816","sha1":"4d21575a0692f22860536345645cb1b788974d8a","sha256":"5591c0bdcbb5e839b6a6de6f4f671f3f7216df72c3158f0279a3290ac0d0b412","sha512":"37989d017584599f4ff24303b9ad6108ff0c9d48ecedc4aff228e434a174bb89c764b0f14ffb7a00e9869fae41032a17a7a81f186b07a6c1f6934e7c944cccc6","ssdeep":"","tlshash":"65f04656e6ad665be03cc282deb8a9a6835e849341469325f0665e4d3f260c29c0baf4","first_seen":"2026-05-15T19:23:33.719784Z","last_seen":"2026-06-24T15:26:25.188762Z","times_seen":10,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"mail.payment-usdc-erc20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}