{"report_id":"53cb7003-d795-465d-bb40-f9b2fd00b6f7","version":6,"status":"done","tags":[],"date":"2026-05-04T09:01:06Z","url":{"schema":"http","addr":"payments.credits-center.com","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"172.67.221.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"title":"Become a Meta Business Partner specialising in Facebook, Instagram and Messenger","dom":{"size":57900,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57897), with no line terminators","md5":"067751755409b8c63a9e44e368b59783","sha1":"206da769cf47a63751262ce9b29470d0ff2432d2","sha256":"1a1c8c237056290935f25c4fc4ff2f1fddd516dff8a9e3d7280cd59d80121752","sha512":"bc04ff60908e38c91fec6001e2b3eaf910e9f30bfe4df430c0d51e37d6a2e9da78509a834bc0b9e6e5a64b98b71b771c7836b964bd18c3aff3a3cd6810fe1ded","ssdeep":"1536:l1Fx5sYOFjtkvTQzT1w1a1O1d1M1m1b1I1B1u14MGg:uYowTQz8","tlshash":"62439535b241a93b375346bd64729f29e0daeb1fc527c889f3fcc14b1389ce54a22592","dom_hash":"domhashb25821f97ffa84f5b0a6949ca9ee691e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"payments.credits-center.com","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"172.67.221.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-08T09:01:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-04T09:00:45Z","timestamp":1777885245,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-05-04T09:00:45.006163+0000\",\"flow_id\":1936718332494734,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":39120,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2026-05-04T09:00:45.000910+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"payments.credits-center.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-31","domain_rank":0,"first_seen":"2026-05-04T03:15:29.11551Z","last_seen":"2026-05-04T03:15:29.11551Z","alert_count":208,"request_count":52,"received_data":4074293,"sent_data":25343,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-04-27T12:21:03.85901Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.xx.fbcdn.net","ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2007-05-03","domain_rank":4147,"first_seen":"2012-12-01T13:12:13Z","last_seen":"2026-05-04T08:19:25.500423Z","alert_count":0,"request_count":1,"received_data":7482,"sent_data":470,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/turbopack-15i5dj196a4l8.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9817a86ca5d13f095de869ab700880d2","sha1":"2bd99472d8ec1be73e6a8998a4a6004f6f67f4b2","sha256":"6a65c3f508f2ba1fb1506a13b28c4a53f53ed17066c5b8c77caedff2cb386c11","sha512":"7d6174401b6617070ca061f9ce09a33e9271276b385fd850ea4f8c08cff08cbc7da00e47db524ac4b8fbc1327076a1ddb2a3308fc14c697802bbf81aa5bb86e4","ssdeep":"192:v4gMSBC88Esg6+9ErUO/lO4jTNWn+S3sBT4fCT3cXXqroor2:v4gMSta/lrW+ssqCTMKA","tlshash":"c322d8da37a6f073436f94e7d06f4004f17984a9145d141cd3aca8e72c394aa85e7f76","size":10580,"data":"","first_seen":"2026-04-17T13:07:04.508628Z","last_seen":"2026-05-04T13:31:51.282645Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/02wbpobzk1a5_.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fab9aca2f659c5bbff7fb9bc87894742","sha1":"0a87b613ac6740520683c9bb20bbfb9900d0b3db","sha256":"c0be0c456b28d31cb1bcfd71c3512c5576e259ab413377ff8d71f2545ef74b34","sha512":"ff1bf235e7018a7ae3db3cef6622acf13cbc053d35fdf7954d5738c5eb712d299f06c7bca3e1a9667aafed959099b58e4cd292a9316505395f25987f351ca7fb","ssdeep":"1536:k4qcjv0pldvuLKcXtPidegVF/PQdgABgROFfgpMwaEW4RlzQT4DD:Xqc70pldvuLKcXt6dJF/PQrBfynRlsM","tlshash":"b2933ac13259b051d3a76592317f7463f036f92284cd8c14f368acddadec989a2a6f78","size":92415,"data":"","first_seen":"2026-04-17T13:07:04.467245Z","last_seen":"2026-05-04T13:31:51.250484Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-05-04T14:02:33.360748Z","times_seen":110915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41addf23eb92b44c7dd34767215c9c03","sha1":"efde4cddd84eb224352da4ecf14b87c93d84151c","sha256":"93aeee38f180a2b309703ca35dccbc6fa1ec61da3754575258a6fa7c281dd532","sha512":"8b2d367ca18d28cce3253a2617d9bd855de5f77e7a741ea6adedb320f74eb10a4eea9176be13e17c94d697f1db1d67245f393e40d72503e29bd5588947dbab3d","ssdeep":"","tlshash":"da51064ae91bfd852c31cdae002f0f3694e0e93b847955adb29ecf9946718774b8c981","size":2519,"data":"","first_seen":"2026-04-29T13:35:31.051814Z","last_seen":"2026-05-04T13:31:51.285428Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0dgq26a5_oy.a.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f5191b9f61efd6a4f63c5ac7f5c6c41","sha1":"a2b647221f67abacb4a57c79b01575f565cca4eb","sha256":"69a6bb99c3ffab75664c38bcf12faabd4bb9dc7e300605c030168809b21bc0b9","sha512":"eb580a3267a16fea1f40c5b8ac5b596c45ebfc32268d4f7028e6dc3d97218133370ec6ea1771d0a384eeac3e08dbfbedf73333f8de4f5d6188b102d63982eebf","ssdeep":"384:57/ZdkTd93jnTUYqSGUFT32IIIq4emi0B/d+3W16DvXxqpkKM8wjn0ieI+wQhNoT:V+qSNl3gId1B/d+m1mvxqml1jn0iP5","tlshash":"a633d7b232d4faa2539341e0d43f2017f2690c75206d6474b7e89cdb754c88da6bafe5","size":50702,"data":"","first_seen":"2026-03-21T01:08:02.265897Z","last_seen":"2026-05-04T13:31:51.263465Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f56ee74a1df6a75690ca52ba9bf92bd8","sha1":"943aaad33d6a9a8eb890cf247c7923d9734f0d54","sha256":"f3156b5e552d0fb2b22d96eed0f8fe21c4dc951f29b24d70bfc97c690a041b98","sha512":"dd9a6dec0f78fb2687139dd37da1808869ae9ceda4471f1fd748c3b04c4a85d1f28e31775b4a4c5b149873a0bfdbfc81ddcc9c9494d081949408d27dcac0721e","ssdeep":"","tlshash":"bc41bf5f6c05de06dc3e7d79023e9e3b10cccd7b8650dab8819ece191a5a6b627d9880","size":1923,"data":"","first_seen":"2026-05-04T03:13:52.856379Z","last_seen":"2026-05-04T13:31:51.286018Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0g.ialm2b4ht_.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d37d2e6f7bf7236e8722a1c46bc27b8","sha1":"c313b9ce73be6d37b9a1f3f830823ace1998c484","sha256":"16732e051416cac14dd941745723e821f6fe4cc74a73fd773ae3f8dd0af68cc9","sha512":"23742d5bf5f0d9f36446a6d04e100c8228c6ef0fed0f5068581dd72f5761e5d809bd8b176895faa7cf5c3a0416b144d48bcf5e7aee203e0ba90991aab357d353","ssdeep":"1536:pOyFzeRhUEt689S68DAgGpZWOIOQHXDzuX6XCxK3dndbaV+:pOyFz8hUEt689S68DAgGeOIOQHXDzuXY","tlshash":"65432ac57796b02243db51d9406b040af27dda29a84c086cf351e8e728b598d96fff78","size":59961,"data":"","first_seen":"2026-04-17T13:07:04.535793Z","last_seen":"2026-05-04T13:31:51.275958Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-05-04T14:18:28.751622Z","times_seen":2234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/01xlw8hd842-c.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7ccf6943f2bdccb995fe5bb7d242b8a","sha1":"c9277a94258757e99759c5669e26390a63cc16a9","sha256":"aee2d073d2a1157cfe5c98907f90b3967de4c3625f9ffb154bd1979ae2b917b0","sha512":"376272243a92205856c2ae832c447172b5cefff730f0850cb0b805d286c5f1feb3be07b6817febda67cc2ecb6c38ef6027b0581f86bbe3617f7251ab9051f9f7","ssdeep":"","tlshash":"716161c9b2e2f8bb83675091407f205bf37e4cf1185d9194e7a5a4dbb82061d81f2fa8","size":3377,"data":"","first_seen":"2026-03-19T19:09:12.486153Z","last_seen":"2026-05-04T13:57:08.382751Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0mstyq17cbf8-.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d32456b39b87420682c00d108d2f868c","sha1":"1ea2042d8f25c3020e34bc27ecbd21132f46420c","sha256":"88bc49cd371493547a00af7676a006fc76bb6267dc023e7e4b80d03cb45006f5","sha512":"23f0fad0ff713beced29c9dfc51b7c0ce770f673915e0ecf50334dc85822a798a34cd8f23043f8f7de85b1d15f90ba21b9de973473557a549dd82a7a679884ff","ssdeep":"3072:aFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:aFLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"1024fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227537,"data":"","first_seen":"2026-04-09T05:49:08.141572Z","last_seen":"2026-05-04T13:31:51.259351Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73cb3eab3bad6e4f989848473718cb36","sha1":"a67ff371588d1f136ccb2d1211c87408b07a0783","sha256":"637222f8a458982df5c629ec1cd8fc106895539ffad5fb5a2d75222515141b2c","sha512":"4a65d25dabe282fc15e090fb79143c04b5d24fc6a2210d66b450a1e9d87c14639ff8c1f4f1c1f948bb44576e4d0acf8ca291107f506dfdda0ede54c071e974f4","ssdeep":"","tlshash":"c241de3d3448da4bed9e781e12bead3a54cd456b07e49eb887d8df01448207d67a6ec0","size":1946,"data":"","first_seen":"2026-04-29T13:35:31.054479Z","last_seen":"2026-05-04T13:31:51.286503Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81efb623a08848c6eb0dc948c18b06e9","sha1":"3639a59dff5656d8833659b19683f8a3ad2d3541","sha256":"58b4362f3aecbe07966d6c1294ecdfdeb72cd66b413a5cba5ca053b2259e46af","sha512":"73f3be1d3480af11e4b8e6b2c2489ab33f4d01d5fb880cc1ac6d96357c37ae08f4ebd31458ed70272e7820d006d504ecd1cabb6913c804741a42c5887e5dd978","ssdeep":"","tlshash":"52d0a791ac02cc1dc2564b56283a2d2511cd89750a5645475c84da289995d7505b4dcd","size":220,"data":"","first_seen":"2026-03-24T17:27:27.7927Z","last_seen":"2026-05-04T13:31:51.286982Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0ht900cau6_ur.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc6da5c31828ba9812b433129a805fa","sha1":"08785ff61957064e03ce08b4a2a60ef9e0486c09","sha256":"b2b0fb9dbb3e38abc0110efd9dc4c5ec29e2e7c6cff449d61c95f354b4014f5b","sha512":"336ace9d3010cb1f560acfd7449d4478a891024372917fd9724ac7ded5bc8c54b4204889846b17c52bcd6928042e545b3da28d879dfb222dde02c8039efdc87f","ssdeep":"384:fy7jBRxWAOvk1llGXFpyl+vT3mrxKHHwyUaZgDdkmKDUEbIMbh:fy7j4LvGlsXSl+vT3mrxKHHwyUaZgDdQ","tlshash":"11721998b195f04127b360a9903f600bf23928752c6cd4b0b396d8f56de04ade937fda","size":17474,"data":"","first_seen":"2026-03-20T21:03:58.57204Z","last_seen":"2026-05-04T13:31:51.262961Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0257pdz1-imal.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd237b85d571f5accb316fb293d4542","sha1":"90213d4a5044267fd43fb17d005b8e7cb4c38421","sha256":"ad09de164a125738fcdd0e64b980a00055427f88d760d279a4e75fa233a14187","sha512":"51df5cea0a003c01f020c13b3af67ceefe1324b9c0dcd2fdb435bbd3c2e85fbb2e6a4bbc6a67ec65630a447f889b5a5ab87f250e5cb881dcb3f7b84ae7d77f03","ssdeep":"3072:6D0JgzlSo2HZWTsGIO0yVA9zEycNv4Z1ba1JjK75B:6D0JgzlSoCZgIO0eA9gyc94W1JjKB","tlshash":"f1e3f8f935d1f48207ab50aac03f0006f22c4db7189e6860e3e5ddda756465de1b3faa","size":149533,"data":"","first_seen":"2026-03-21T01:08:02.25906Z","last_seen":"2026-05-04T14:37:30.384748Z","times_seen":346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/15.3p79.pqk8..js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed295c1cb1b7c173ab3929b85e7345a","sha1":"1e6da5e3f5029d013a3b82f57181c2205905fa30","sha256":"534942caa31ca139714a1582c4ee1506219cedab49857c05c2e8268c6fcc33c8","sha512":"4b9a2afa7a825b693963a9d7adbaf9c22766791a30ab3cb703da3b4d3262367c171e6123ccd012cf162e8b5b59099a9fe191fafd36452d56416860394ec96d97","ssdeep":"3072:EJOGhde4qS7AF6epQ2dDtUqu7feG8KtPFhR+IJ2BNH9:EJfetBpQ2dDtUqubeGrFhR+IJQ","tlshash":"02343b89b251b969d3ab4094845f4109b23f2e98940e443cf6bcecdf295448973bbf7e","size":241170,"data":"","first_seen":"2026-04-29T13:35:31.000229Z","last_seen":"2026-05-04T13:31:51.259867Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a96cabfd8c38230672ce9477718164b","sha1":"870792b7fcf86b2ce49a0e5d6842bf6bf8d6a88e","sha256":"15c77bdfaea0ab8714629b1029233e96e14ed024986d109e9075d60a30fcee60","sha512":"6342b67d008f6e95934560745032601593e9174410c4af4b0f0efbe7f591b3263eb1631a3f8717c247ded1e4d29c1bee7c80950269d92054358731e9cef1cfdc","ssdeep":"","tlshash":"9341e0566f11dc2db745ce17083d3cb094adcb0b86ca740bd988c96a0347db51af2f92","size":2005,"data":"","first_seen":"2026-04-29T13:35:31.05711Z","last_seen":"2026-05-04T13:31:51.287552Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_understand.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_understand.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 948\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 16:01:33 GMT\r\netag: W/\"3b4-19da1536f48\"\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxWxGKV%2F4j42pPknZqpYMqGpLpFLL7fbEqlPoqyE0YxAJhNj75O6WSeWn7skWYN4NTZHCMxf9uYGue%2F2vM34qPb4sD502C5wCZvdgk1Ws3wdM66mNCcsqo0JYiFMnGoc%2FpfSTcuOJt3Kc0S8WfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdeb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f912fc0995e64ea5110d193b00d7675","sha1":"821fdc9c89c27724f80489ab979ab90672d47734","sha256":"1cffd363a65f80371936bd179dafb2c1cba96719d02fdcefab1ecae23e0a05a7","sha512":"68231f87dce6a6c7b20405f28191392bfd6c4f3722435e24db824ecc4395769f6e80deddde7ba7ad52a5cbf4107299a761969badf8e188903ba32dcb1f7a19f0","ssdeep":"","tlshash":"d511c821954c0e6e615d6090da9c6e52c4c4cbdf28e04146b3eb14f6a9cdba1c3b488c","first_seen":"2024-08-19T14:48:30.639311Z","last_seen":"2026-05-04T13:31:51.258206Z","times_seen":22,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/15.3p79.pqk8..js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/15.3p79.pqk8..js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"3ae12-19ded5c5058\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HY8DMLo45P5afHTmEjEUsM4V6Spw6fSyWFO5g%2Bp2FYPqoZthBecUegG5IY5ZIyKT18G0y7sO6t8GxCv2a83d7bh5Q7GyrjablutJ7pHO3Z6kURzTiOHS8E%2FtaTW8uhJXWBvbX8GAjb7G39mnENk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b3e5056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241170,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"bed295c1cb1b7c173ab3929b85e7345a","sha1":"1e6da5e3f5029d013a3b82f57181c2205905fa30","sha256":"534942caa31ca139714a1582c4ee1506219cedab49857c05c2e8268c6fcc33c8","sha512":"4b9a2afa7a825b693963a9d7adbaf9c22766791a30ab3cb703da3b4d3262367c171e6123ccd012cf162e8b5b59099a9fe191fafd36452d56416860394ec96d97","ssdeep":"3072:EJOGhde4qS7AF6epQ2dDtUqu7feG8KtPFhR+IJ2BNH9:EJfetBpQ2dDtUqubeGrFhR+IJQ","tlshash":"02343b89b251b969d3ab4094845f4109b23f2e98940e443cf6bcecdf295448973bbf7e","first_seen":"2026-04-29T13:35:31.000229Z","last_seen":"2026-05-04T13:31:51.259867Z","times_seen":20,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_in.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_in.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"2b1-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6BAi5qDASQzeo%2B9l9UR2QLLduCi2B5TfvEJUqmHsODy3A84yPJ2gPUQfcC1ZVLF3DFypGWS58l1QnbhbSAXY5%2F7dGUqgFki7289lwT3dr%2Fkn4k0Q1IGrhR7TyEinhZPGANxehN2eWD9bphJfIU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511b4e6056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":689,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f80c57ac417480c1d061009c6d656eb8","sha1":"ab7212a9a254822305e195c17b70a0b0bb027c07","sha256":"139b4ea803f896b699070d46407159f80e6990c2803fc1df8abef60cab83ecdb","sha512":"65f827b6f8d9a9ca26481a5b56e02411daa538c54f6082656870ed9d3288d4cfbdca0d3f02d175c4300ae0b61d6b3198a76ec358dbcaf0e52bf73fc29fa6600f","ssdeep":"","tlshash":"5001f4fe6658ef08cd5073f9c01435f0c26f56bc638d91b6a90df3a3a8050d0666e649","first_seen":"2026-04-17T13:07:04.462698Z","last_seen":"2026-05-04T13:31:51.255799Z","times_seen":26,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/videos/ads_manager.mp4","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /videos/ads_manager.mp4 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 224647\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\netag: W/\"36d87-19da3d9d3d8\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 03:47:35 GMT\r\ncontent-range: bytes 0-224646/224647\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRhxXjqPsR5EyN7rQZTg9r56n%2FuHQb%2BCvWxsQgew9PJhEApT%2BOqWNhb%2FwWbXos5B3F7YPrMBM3yG6NGJ7dr%2BSKOxApqG7bWziKy8SfL4zP%2B3M2FpkYe9QME%2Br7CuiUY7w2Tyxyd0c2%2Bw6d1oj4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c0f4d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224647,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d4c27018be3f8fd355070072e5aa95ad","sha1":"4319b399f96e05bc790645dea27997e92f3d6df7","sha256":"19285fa0d2cc3d20983e489d6b189808548a20dafcad1e110d9f1092d69728e0","sha512":"bbf57a577cea71eaf152c4732accc9d92cd75334223fa520bc584969679e6ce5aa3be8e16fb9ce707114b049bed3d7f714a75ddd32bc302dc7eb73a4af2236f0","ssdeep":"3072:GjzRKezHgU2rpQ3ZsPrQ+yM/2JFK7uXGyw66TNg/m6djOb8MW4xk33tlVdY5v+EL:G34ekrqJss+z2su2yS596RcF78dfO5vP","tlshash":"c724f1b337d01b6ac79adbf18da417849af0ebe9445f1f27324e22992c07a1c0d436e5","first_seen":"2026-04-29T13:35:31.026099Z","last_seen":"2026-05-04T13:31:51.256773Z","times_seen":20,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":357,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/videos/fans.mp4","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /videos/fans.mp4 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 198280\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\netag: W/\"30688-19da42da4e0\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 05:19:08 GMT\r\ncontent-range: bytes 0-198279/198280\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7AHXWP8SchKRG1UWj8xBVxpAvVsPFFOIg1pq2Ni1GcE9a1zXn%2FqSKHtQaz%2F8Sjgbf%2Be26RUXEWJUd3hKfIKsdjNllamxEswVJMFpjAPKZJNlXJ4ohtX9HcgYfOWWwA6vbXdIauAFuBhcko2A%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c1f5956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198280,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9e4eca1a5846d5be5bf7c54dfb25f23e","sha1":"8773a04b4daf61376155a9354e3baaa315b0d1dc","sha256":"4cb7f526f9c767dde3d22bc622884b9797b363748c5e2fc7fed9ebaebcb8dbea","sha512":"d0cb22223b1ca4f5a7ecf9617d70c1175e8dd941ae2fd049ed72e3fff33b220f1b3756c5168a43cc26e29a66af5a74976cd5f8b291e0b6b412475f3ba4a7c909","ssdeep":"3072:3d/uFnsQdwJZNBYeZ28VpvXr87FnXoKD/B8k5lB4qfuUGKGj6SjPhV/1:3d/2nDdwJnZZDbj87tXTrBdYn7//1","tlshash":"d01402671f718943df31317e8fea8e0a7653d42c0a0a671304a688bc2929df5bf6651e","first_seen":"2026-04-29T13:35:31.02325Z","last_seen":"2026-05-04T13:31:51.267225Z","times_seen":20,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:45.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 21:16:17 GMT","end":"Tue, 28 Jul 2026 22:16:15 GMT"},"fingerprint":{"sha1":"6D:CC:48:D6:E1:8C:50:0D:7C:B9:13:15:F0:18:E0:73:56:59:60:F7","sha256":"00:FD:76:18:CB:8D:B6:5A:4C:B7:0A:37:77:28:B1:01:5C:3D:6A:E4:2D:06:02:C1:9D:B8:6B:F8:6F:F8:31:77"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payments.credits-center.com/\r\nOrigin: https://payments.credits-center.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f66511d6a858deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-04T14:03:31.550304Z","times_seen":87837,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":90,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:46.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:46 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=14400, must-revalidate\r\nlast-modified: Mon, 04 May 2026 09:00:46 GMT\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHeNVz5j6bModZm5B6aO6UFKb0Ue8XrVaWTJw1Bdf79LBtl8hKtJ53nKJ15c7OgUIFMyqLZ2Tkfl8t9W5hKlq4ZOSmI3BhuokSyeut8t41udtsIAfPtwoLi6YAsl2jVsfPNleK8LWr7Jw2y0gmg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f665125ea1d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-05-04T14:06:38.315442Z","times_seen":18427,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_arrow_w.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_arrow_w.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"4ac-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJLMxXq7RDWugrb4E1AnT5ObDnFK3bVhgDChbL7GtJgJMcR%2BC%2B7VBEPMuPwqGYiTGEei%2FVV3pdibPvbp7efJWRuRDITJsl3FTLoavC6HX%2FyNtsmAqpmNtCVDiMhfyZM3nCL5jcFkCUzBqiQX%2Fac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b1e1c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcb996fc41b2e4072119bf2c3e873375","sha1":"a6431e8412ec73866b3fcdb4b2d319cb7d171f21","sha256":"e4fc7971c134c176fab416a68f668363e7b47c8b315c151ff6f4e2143392ffc7","sha512":"f6bef84d331d790e9f309e268c30e182549813fd8d420841e96c31fd4f9958aafbb4cfd30e24d6d59ba5f073ddc8ccc8c0c815eead0390aae026c5b44b216c85","ssdeep":"","tlshash":"7f2141f9006cdde19f08d9f8d03839e49013b0baaf4c709662dcb4637427ae90908cac","first_seen":"2026-04-17T13:07:04.502568Z","last_seen":"2026-05-04T13:31:51.26975Z","times_seen":26,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0mstyq17cbf8-.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0mstyq17cbf8-.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"378d1-19ded5c5060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yst1o0DDRT%2F6Fc9MNhQRZlzUazlnV%2FvFvrdksvgjbwqdlIBC29o8mtXRkfSNp3R4s%2BvwXMw8%2BjGc%2FlnvFkCBC7ZBovh0XXskyda4ci7WFcwyvCmjgOSR4w40IibrbjMo8dNz1ONlwI6BCIbCJU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b1e3856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227537,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d32456b39b87420682c00d108d2f868c","sha1":"1ea2042d8f25c3020e34bc27ecbd21132f46420c","sha256":"88bc49cd371493547a00af7676a006fc76bb6267dc023e7e4b80d03cb45006f5","sha512":"23f0fad0ff713beced29c9dfc51b7c0ce770f673915e0ecf50334dc85822a798a34cd8f23043f8f7de85b1d15f90ba21b9de973473557a549dd82a7a679884ff","ssdeep":"3072:aFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:aFLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"1024fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-04-09T05:49:08.141572Z","last_seen":"2026-05-04T13:31:51.259351Z","times_seen":183,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-04T09:00:44.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/797e433ab948586e-s.p.0.q-h669a_dqa.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/_pkMfchyeAZ-s.p.0_tant~io3df6.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/caa3a2e1cccd8315-s.p.16t1db8_9y2o~.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/images/meta/logo-meta.svg\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_performance.webp\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_people.webp\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_expert.webp\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_solutions.webp\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_understand.webp\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_formats.webp\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_apart.svg\u003e; rel=preload; as=\"image\", \u003c/images/icons/ic_arrow_left.svg\u003e; rel=preload; as=\"image\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y27zub8KVaqj1lmuhf6%2B%2F7%2F9PPCMcCzdVeXDq6gHx%2B0T4IrNXNAx58djLL%2Bgc6p8R5ezyd%2F%2BJ9%2Be2lCopFeROOF63qbuB5py5CSei8OdubEawGei16oUXbqxRl8ovDImF1lHQ03%2FLeOAKjKp5Ko%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f665117791fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-h2-pushed: \u003c/images/meta/logo-meta.svg\u003e,\u003c/images/icons/ic_performance.webp\u003e,\u003c/images/icons/ic_people.webp\u003e,\u003c/images/icons/ic_expert.webp\u003e,\u003c/images/icons/ic_solutions.webp\u003e,\u003c/images/icons/ic_understand.webp\u003e,\u003c/images/icons/ic_formats.webp\u003e,\u003c/images/icons/ic_apart.svg\u003e,\u003c/images/icons/ic_arrow_left.svg\u003e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57582,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57579), with no line terminators","md5":"21ce6e6b074d8b6e94788b56114c63c4","sha1":"44a4ac2c2be16f80d20e1ca327ea392c01342c45","sha256":"d9cea3531494d6957b712a0ea3ae1f87aa83b670db3984ab83d9c9175e4f2404","sha512":"2a3bb2a75c8d35eedca7e02512f6a78ba0c35c8ee32f46aa45a5486ac97cee9c2eff4ba5700d030d2e58f833ec6362ccf319355ca494ec1a17f194db5204db53","ssdeep":"1536:R1eL4x9TF8ykhG3eX1w1a1O1d1M1m1b1I1B1u14MGM:/9ryG3eU","tlshash":"2f439535b241a93b376346bd64729f29e0daeb1fc517c888f3fcc14b1789ce54a12592","first_seen":"2026-05-04T03:13:52.831784Z","last_seen":"2026-05-04T13:31:51.260942Z","times_seen":6,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":395,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_formats.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_formats.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1218\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 16:01:48 GMT\r\netag: W/\"4c2-19da153a9e0\"\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ifcdv4JeL2NRJAFz347RtTXOHCWuhRYiOZcQkY6P9ttRAAlwgwHaZcEiwqRf7N6XyiRlfIRKJHIbHNPtjde7YcPKQ6X2x9OFaIf6NU1Nnxi7OpokJlmjzR1W7EcQ5SPVeKlrTOLd5MkS5pro508%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdf056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9b42caf8481f3435daef4a210828b7c","sha1":"8518c9e5077139c6e53d3fa110fbcefcdc09fa51","sha256":"0cb51e2e34b61fd90eabb012c04839cc56592f46973f24f5c1e1714c6403077f","sha512":"114d39713b05752f44acf76c1c89f0c3cd72ba912378ba6af61205d33337ac08216f8e1c7cdecb0bb2b52f945283df10da10b6afb89f01965021969fde6d732d","ssdeep":"","tlshash":"9221b7d4e0aa0972e9d9451bbea7487c33c505dee307b0762380bfb010e90c9364759f","first_seen":"2024-08-19T14:48:30.640659Z","last_seen":"2026-05-04T13:31:51.26039Z","times_seen":22,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_apart.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_apart.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"106-19d20d3ba80\"\r\nvary: Accept-Encoding\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pTFAg96r1NXerruBkOBi5p%2BxEwOZcqIx%2FovMFOCl9eLAgwEirNmTc0GrQWFnmlCCiHPenhkJi9w%2FhwkJJUZftW4mtKgSZSPp9CVdDFdZpvIGDKaeeZCmArZvX8sNcOSzgPLaQ6U%2FJy%2BFXEvRhM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511afdf256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5feac06296774f03cf427fedade28427","sha1":"5af72730364af478df2485572a42022081528cd3","sha256":"8c94f66b00f4e5b86fdc37824159f20f07aa31e586075d19d7e726106b246121","sha512":"806a9e97398045f0e13c27128d4a6f06e55987d1624df0214999e69b18c50ff9e72a7f9c7b9be4f2838877fd5cf56a28fb61bd3eca090130bb64075076144b79","ssdeep":"","tlshash":"7cd02b7a7289cd010dd1ca71d01c7922c25f949761840050e695e9bbb8152872874e2e","first_seen":"2026-04-29T13:35:31.039652Z","last_seen":"2026-05-04T13:31:51.273527Z","times_seen":20,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_plus.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_plus.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"193-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqgm9gdvv7wSESrX2QY2QLz1t2ZNuYfaonVpxU%2FFy60elEXXG%2BgmvbplvDbNnIkaN8RMj4di%2F1WthADvvi3MU92%2FcnsEPTO9dmCBMQFmc9ULgqL1BEkcR3dg%2BofqgMhxy2IWgxCMArYaiT6KXws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511afdf556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb443f1c71aeb2b5651782b4e3ac1daf","sha1":"da1077088ad6973e92ed846a44c520d4f9dd1060","sha256":"c36e0a05504674fcdf36fec117623a713c5836fe01ccaba01a0e6cde820a229a","sha512":"fb9c98e65ff5cd361fc91e137be640a4039bde81d2cd16081e51cbd2ad6c1a1c93ae249526894301e052c2915dcb2b546f49f68ec023a6b6557a7160ae092327","ssdeep":"","tlshash":"7be09b7b77c9c9230dd2c770940d3a12c25e587262400051b6adeabf786568a28acd2e","first_seen":"2026-04-29T13:35:30.99406Z","last_seen":"2026-05-04T13:31:51.253691Z","times_seen":20,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/media.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/media.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43290\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 04:56:33 GMT\r\netag: W/\"a91a-19da418f7e8\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45%2FJHrkPfoh4wi8y1qd%2Bsf3OH06Ddp6k4Uf0B1iz4WyidQ4yLIkQZqdGG2%2FtGjRrASoEbYxHix61u6DPmg%2BQmjcxsu3MJmFoU06%2FP8A%2BJfGmw2L7MjSlJCOcI%2FwjdjePTQjzha0gL0SMmkKgEao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdfc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 912x913, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b93bfd7526cd1b671879508998ebde5","sha1":"1f807f4732bbdbfef043544b800ac7f601e9067e","sha256":"1a58f87ff4277cd94660d397004dd5a22f6d26a49834f70815ea04ecd47176a3","sha512":"602b77ae9ec9326a08c9d5f757dcbd3716bd87a64774640e1a3249e0248dbbbbfeb19361703076de2e0710a156acafb1e641e14886cc8c7c0b97628998bff306","ssdeep":"768:/MlKeA5mwB6zol0u/0DXh7Bgt7IcOnvigKTorf+AI7h20RL94lsFlmB/F1:ElgIwbl0u/0DX1BgFXoNOorfGM0RBgeO","tlshash":"0813e15623aa580aff1ee476861238bcf642c0406b612bf7a445c2746e774f68f3479f","first_seen":"2024-08-19T14:48:30.645108Z","last_seen":"2026-05-04T13:31:51.26444Z","times_seen":22,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_whatshap_color.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_whatshap_color.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 08:35:53 GMT\r\netag: W/\"505-19da4e1c628\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQvDQ6HI1EFiYHoiTXKFZppFvUzkWVJPOCi9s8quBC3%2F8lCySbZQVTnfP%2BbIGBYB6xca%2FbsNGCJ7Lh45JUTWXcgMzpaiPLIDs9vRvDVv0zWUSlxuLWOmP%2FD%2BzrGW3w9jjLlS%2Fbogb0np7DZm6Hg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b0e1856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1285,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99f75c961b0fc1c971993ce2ae501044","sha1":"32a2d560b5f6740eca78542d6b7269e32670250c","sha256":"b4e40c29b46b2d77a5b8511c00ee6a093195e13ecfc6a2106b73f37bf6228818","sha512":"836a364b55169206e5027faba2771c0b28f42b74813b4da896fa4e43030227dffeb911014ee47d81b135e9e237ac5eebe2fe14d80d9e1925f0b7652f327362d4","ssdeep":"","tlshash":"d221c075c38fae19f12693f4812448b0bd8f51eea61ae67c5b98a471f2180cc42fc455","first_seen":"2026-04-29T13:35:31.015138Z","last_seen":"2026-05-04T13:31:51.282097Z","times_seen":20,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/media/797e433ab948586e-s.p.0.q-h669a_dqa.woff2","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.0.q-h669a_dqa.woff2 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payments.credits-center.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31288\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"7a38-19ded5c505c\"\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNDZzkbxgDuK%2BFyaoggfl2SrVEyAy7ML0%2BBQQcocBHLCC6y352i5%2Fl5Ez3LRZo%2FgA1Y7%2FQn8Y4G0qU1eFtdSaciR8K2P%2B4wHhwl%2BIqgv%2BMTD5POyjO1zVBcEkFtfmRlmNR0%2FW%2F7sat1sBgRy9W0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aedd656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-05-04T13:45:20.745348Z","times_seen":20732,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_performance.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_performance.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1008\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 15:58:54 GMT\r\netag: W/\"3f0-19da1510230\"\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGaf1UJoAFaJPx%2F0318VO6ZiY3iqAEdKc8ZbUxHcNm0U9pFr3kGuW2fgvXj4qcJSZwK9nkFW6RU0sXyTQ4K4HM%2BSogqstgduY9eZmEchmF13YK%2BF92XZ8qfvld7k4xtgpBdp1kHI1Pak%2F0kQ1O8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aede356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"778caec7807d28e9b6734a3ee6dce463","sha1":"e0999a9f66e304aaa34d8796865886ccdfcc2045","sha256":"7ce16b160673f517e938c3166c62dfead669d30339108b7932d90d111ef488c7","sha512":"e64cfad6c0004fb535623985f5812ed5e73aca201077da0e22ee6158ce0fe016a479de414bbedb59535256b4e89ce853f95ad5715c58a1f0e5cf6354f1eab3b3","ssdeep":"","tlshash":"dd11a55a058acb0fd46d184ea5a8430748e2c08c61655a6a22bb9de265e0d4472bd1d8","first_seen":"2024-08-19T14:48:30.637035Z","last_seen":"2026-05-04T13:31:51.268769Z","times_seen":22,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/shopify.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/shopify.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50632\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 04:36:15 GMT\r\netag: W/\"c5c8-19da4066218\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxvaxr0fUu9wWyRe7nLQBgbu91FRjEZjH%2FeHtF0ADQPrIz7Ek4sn8DUE9Yg6IOw56Hn8sduhVFRyPewDuwGksx3TgGURLlBK8ew9frppcZmS9ZKjHWKFYNTXKLwiFT5TdfpUOgAlsjw3XYokCXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdfa56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x1067, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c2ec63a1bac56072b473640f14ce338","sha1":"a3038d249aa9518b90ea7a300544373a445ee833","sha256":"514b04116ff7ac0ea73146e89da4f1379d6a14ebbb1317cf3ee3f7da79ef81f5","sha512":"6aead980146450b196d7fea503c19ebcacb7a752d118d9f29afe3906e65f6eccd4d13a99cd0209a9d1128f133ba7c8619f7fb9932bf5a36d8d6b952ee2b56727","ssdeep":"1536:thYp/27XKU0X9loSZDDT6wO7iVRweOOgaXkux:tWkyuSZDDTrki3FM+","tlshash":"c03302f7f92d5557632b17273c30b68b70a186bc4a2c10c2dfe09659f7298a1143ef6a","first_seen":"2026-04-29T13:35:30.99607Z","last_seen":"2026-05-04T13:31:51.274088Z","times_seen":20,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_facebook_color.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_facebook_color.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 08:35:08 GMT\r\netag: W/\"630-19da4e11660\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lu7NtzNfrKnYbSP7LiruCz8JRdHNvmWFEgnRENRk1v%2FBfOHj1K2zCwz2tI%2BopnG29VkLMpUg98tt0m%2BaZA3EFJH95hNeYw3KzsyLLXXZANQN%2BwUbYJchVdGU0Xogj7hKIbmIS%2BOU%2FlafivVLkIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdfe56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"096e9d052d4e8e4abb812ee7d8e2428b","sha1":"7aa9fbb915c38af80fb9683ca43adae055f90fc0","sha256":"50ecc3b01965a258d9b7272392b4b82b26982caea02170aaa3ba6257f35aa7bf","sha512":"d8ddd99ee525235b4d63062c7acbaddfc8253890da3c3a56af6e8008c4726493f14a14cdcc79c2a35770c796d038d7bd267fa0e39ec714a3b7f62d79e6612753","ssdeep":"","tlshash":"7c3156a64955bf05c598f3bd4004b4742197b3f0ba82ea404b417a3728db4551e5aacd","first_seen":"2026-04-29T13:35:31.050027Z","last_seen":"2026-05-04T13:31:51.274577Z","times_seen":20,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_instagram.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_instagram.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"fce-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHWnYQl2Qmuf4uVDOGMV%2FABV%2FKylKuOLWXtzMx1kiFTWfthU1g8sYXqgdomyW8Ir1h8lX7yNjb2ggDkdTcXJfc9%2BtKRe%2FZsC965GfUx%2FEa6j0RN8LdUIesProXV3t5qRgq5ZUE1FQIzcnBY0LmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b3e5756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"810842afe1888f14cba67de4127a0bd4","sha1":"1d49c77105928653e3da0af0edfc2425bb34d290","sha256":"ae9deb88cb6bfe967a8f5402176c43e59604f8724c4ef072f95ddff89b141b53","sha512":"85953bb5b9467a4ed67251282e82123f94a9518d120f2c7a3fa9a11e1fd0b8b27286a7382b68ea7601751ab524be729e9d1e608b7623a960512970d7e4257e56","ssdeep":"","tlshash":"b38194e053d1aad09707dbf4cc36b0357a1b347eee55c3da829aaba29d250ac489dc40","first_seen":"2026-04-17T13:07:04.478112Z","last_seen":"2026-05-04T13:31:51.264956Z","times_seen":26,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/hero.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/hero.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8%2BxxtWYyExx6gEdht%2FZhW%2BFLfsXP6VxQv7muc%2FmqIf5s45dAujsfrQS1pOh8RN6E%2Bu0ACiUeCIq%2Bmu20gd%2F3WemGo0Qkbrs8JbNjkM8RcoqKdoHVY4eAYpIKf0dalt0a1LBZRnpfM32T4WKnWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511b4e6256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":10455,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10455), with no line terminators","md5":"d9386538372757fc5b4227443d7d70fc","sha1":"2aca5e8e154807f8606981e295e90d8f7c777395","sha256":"04dbae99f3b8c866c8899fa6da79a0144ed726e09a5523e5c2625ba09a3e1dc4","sha512":"eba75397070999e77fdd96f4455c8f75aced83e490d63324e39dce02b7df7f2657512c12d67fc703b857d0729b208d492e181806c213fa3858df14799feb7ad5","ssdeep":"192:fSUOl1GSnvhWSzHkb1i1D1z1F171p151o1FtN1ngnqzcpm/EqzY:fHOl1GevhWTb1i1D1z1F171p151o1p1e","tlshash":"5522031aec05fe46ac3aad6d003f9e3a50cdc93b86b489bc92ddce58465147a1bd6dc0","first_seen":"2026-05-04T03:10:36.380573Z","last_seen":"2026-05-04T13:31:51.270326Z","times_seen":7,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/thumb_support.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/thumb_support.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 118720\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 09:19:25 GMT\r\netag: W/\"1cfc0-19da509a148\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSrV1p5%2FVZpKCDPt%2FV0Nlf7u%2FHkNJ2GGEA6Ywbp8CZRahS1MSMz%2FRWXduN5hfuUJoh1kwjIB8rIvONELxb33uP%2FDvHcmXDXCL8g62PhX8AEZ55l%2BDuSOM6YZUiHCSN6mhv02Ve9ATjf5yc%2BmX2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b4e6956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1067x1068, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d45e766366162cfa45376b280c4dc17","sha1":"ff3ff78a9a3adb63b90169bec036b8a8428b1350","sha256":"39c356613f14509904231d2dce8a540556e5e90e6cfc72f1fe53710438fe2ef9","sha512":"a52026f4e231fbf87593689492c184c0480aebb5b82aefb970fcfdcbb5880402ca955aeda01cec6a82ee41ae121e13df42c7f2ec828bb865c6cfebc47d668af7","ssdeep":"3072:cw9O46b0kug1wbqPQOv1OYxGfF1cc3CRHhH:cw846b0kucwS3vtx41cT3","tlshash":"ffc312dedfc7aa50c1888d8084be135dbc54a1e220d5a5f897bb24d3f794b3ab44ed09","first_seen":"2026-04-29T13:35:31.018259Z","last_seen":"2026-05-04T13:31:51.251868Z","times_seen":20,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/fans.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/fans.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64272\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 05:23:51 GMT\r\netag: W/\"fb10-19da431f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atKpHpf%2B0wztezkXogqoOEQzcdZ5egoNyWFRLssn%2FyXGeQo1BfLRQwuxHYGfYxC0LUz%2B%2F0F1aHZpu6CX0R7yyvE94OK1D%2FzPasYX7IxfNosDvKgVvWQJOOyZJ9RVBXVfGKRofHE6yyqpbIxOYGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b4e6556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1008x1257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c333ff3238796d3982d57464bcfc4aba","sha1":"68f329625f7cc948b318558e897d36c3a02d208f","sha256":"7c9893c14d1b10f1f97746a724aaca66dfbf71813f5f787490a4e35f3559c659","sha512":"4eb4563c3203008a38d1c0c4c15201da88af02fde1b7bec3e7ec51e406064d0f679b5703efb0f7322255c5392145620fec72467a4bb07d635f57b2a503c64fbb","ssdeep":"1536:FyP+wwNW15TeoHJSY3DJUAHshcP+pcT1DZBOO:Fymg5TKYTJUaPIcTVyO","tlshash":"f75302e15f60926af248c41956596b641f8236e31f43c9ce3a33227e30147f6dfa5cd2","first_seen":"2026-04-29T13:35:31.004032Z","last_seen":"2026-05-04T13:31:51.283204Z","times_seen":20,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/streetwear.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/streetwear.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51144\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 04:35:06 GMT\r\netag: W/\"c7c8-19da4055490\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S%2BTrpHAxaK%2BAsuKj%2FUHjbYMtGHjXyrePFu16wkaiSo8bd7cpm4Kn6GBCyt%2BdygiC0NrIcXB7slm6ODhtleG1s7xyIDmJ9BD6R0v7%2FlE24qutkzOdi31CtK%2BB%2FwNJyWE88YKLKKnLxDWdKNN%2Bos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdf756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x1067, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62a3fe1319b28ddd9f14a1a9087f40a1","sha1":"b6eebde0f3e96586f281da347bab8e7f283c1035","sha256":"26cb460dd3f4c6047b1f3dcb9c3a14539655a80aa8d2bff9f05ff4a5b1e1f37d","sha512":"ad8fb8c68e8af9ddd8502771e07ad5b0ff948fdb30e25f56d79f250520c7defa3beaf91d62e2cc1ffa911d87d5e14482054d445451b04d7ed1131e745a428d7d","ssdeep":"768:br8pGyfBOZrkD11rBE/m98zzY+zoyAMXVakFTNX2G1WxC8KRk1Kv7Ny:0pBHLNE/mqY+fxXVtVt32LAJy","tlshash":"af33f1633524494b7f76ee239387476ac5f7f6d500e6a01c9be7628e81831843b176f4","first_seen":"2026-04-29T13:35:31.007218Z","last_seen":"2026-05-04T13:31:51.262462Z","times_seen":20,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0gkr7-x~nk.3..css","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0gkr7-x~nk.3..css HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"138c6-19ded5c504c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHGWLrEmjkvcuDqziCgk7t45RdVNA%2FQHGnbWBhYPzTImrljGmgxpxCgMsEvNrvxgoPqSJEsJnHXoV%2FxtJNjMKkbrbLU0UsUgXOhpxNzdG12JqlS7tV%2BcBO1H3WgQM4HG1dkyT0vYJVAR51g0aj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b1e1e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80070,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (44896)","md5":"32800226d1ee0f8698cd6e3611558aaf","sha1":"4586ca4d248b9f30bba01ce0cc6570a21a4c94e1","sha256":"73ead5610fd2043c2b2a5ad5ed65ebfc159940eb60c6639c25294277786fe10b","sha512":"ed13bb103d217bf12b785bd131668575c4e5d2b78a3fba993c2c39f48c7984790953f75f3ab77ac98cbacf3ee4f33985d1053988a2581f7ab06285d403b29cfc","ssdeep":"1536:902Fkj74LbH19TSoGT5YS+tuU5d5JeTls1G5sh87uHzpC9eGkMTO:902W4bTSLibRd5JeTls1G5sh87uHweG2","tlshash":"6873c81817c510bbbc13c8f2e1e46bd4b12eb284ea251bfdd8457526e2c36e90b77e61","first_seen":"2026-04-29T13:35:31.016526Z","last_seen":"2026-05-04T13:31:51.255269Z","times_seen":20,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/01xlw8hd842-c.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/01xlw8hd842-c.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"d31-19ded5c5058\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0rG7TjaLnd1QsBzg19XRv7oYjC%2FDQFuZ7jUGBC5dCtM%2F9pRqyTI1LQJBvVxKH4P5swSj%2BGoeXWA%2BXA5lkX8bJ8jFY%2Fq6P9yXQnj9A5V0Ya%2FGtHQvwqg%2FLGTVeY6eAwq%2BjpmLdxZXUOt36rZW3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b2e4356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3377,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3377), with no line terminators","md5":"c7ccf6943f2bdccb995fe5bb7d242b8a","sha1":"c9277a94258757e99759c5669e26390a63cc16a9","sha256":"aee2d073d2a1157cfe5c98907f90b3967de4c3625f9ffb154bd1979ae2b917b0","sha512":"376272243a92205856c2ae832c447172b5cefff730f0850cb0b805d286c5f1feb3be07b6817febda67cc2ecb6c38ef6027b0581f86bbe3617f7251ab9051f9f7","ssdeep":"","tlshash":"716161c9b2e2f8bb83675091407f205bf37e4cf1185d9194e7a5a4dbb82061d81f2fa8","first_seen":"2026-03-19T19:09:12.486153Z","last_seen":"2026-05-04T13:57:08.382751Z","times_seen":790,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0d3shmwh5_nmn.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"d576-19ded5c504c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fTr9Z7lorjlC1Nr2UeA19zoVmIqCGNsV471C6unJvfEAC2Mv%2FVOOBoTEEEZNlyYwc%2FsMPaLq98qkc9cbGKOQVZTcWCgPoLWH2DEEsOWpw%2FxM1aLtfL6lZjhHBV%2FbK2YQ07vCJRUkCWxss3IEvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b2e4656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54646,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-05-04T14:18:28.751622Z","times_seen":2234,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/02wbpobzk1a5_.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/02wbpobzk1a5_.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"168ff-19ded5c505c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5JVmixdXDQek7W%2Bl5lg7H%2FTEjNdeXzIGm2oc2KiEjPXiiZWYc1PeJ%2BwSw3CpgJENEnrMDchgqhnVAU2T1%2F6IXfwKAD3pPebbwZHx7X%2B%2BTByS3WYF9hbASKDXAmAQ%2F8cb%2BQNU57TEkbkMJXnt9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b3e4d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92415,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fab9aca2f659c5bbff7fb9bc87894742","sha1":"0a87b613ac6740520683c9bb20bbfb9900d0b3db","sha256":"c0be0c456b28d31cb1bcfd71c3512c5576e259ab413377ff8d71f2545ef74b34","sha512":"ff1bf235e7018a7ae3db3cef6622acf13cbc053d35fdf7954d5738c5eb712d299f06c7bca3e1a9667aafed959099b58e4cd292a9316505395f25987f351ca7fb","ssdeep":"1536:k4qcjv0pldvuLKcXtPidegVF/PQdgABgROFfgpMwaEW4RlzQT4DD:Xqc70pldvuLKcXt6dJF/PQrBfynRlsM","tlshash":"b2933ac13259b051d3a76592317f7463f036f92284cd8c14f368acddadec989a2a6f78","first_seen":"2026-04-17T13:07:04.467245Z","last_seen":"2026-05-04T13:31:51.250484Z","times_seen":26,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0g.ialm2b4ht_.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0g.ialm2b4ht_.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"ea39-19ded5c5060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahTHKKkWtPWwykhiYjD%2F6vtyvSS9vN4LmgEpOJJewHpkaPXLBL4e%2BUtmzz6RCUA1OTkcXYzdnZq3jZA%2F2mpbGS5%2Fix6qsRJ4XCmotP%2BJVon%2F3qIEWDVTiEeH1Qg3waRC1B56DSmMq46puvqB%2F3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b3e4e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (59961), with no line terminators","md5":"3d37d2e6f7bf7236e8722a1c46bc27b8","sha1":"c313b9ce73be6d37b9a1f3f830823ace1998c484","sha256":"16732e051416cac14dd941745723e821f6fe4cc74a73fd773ae3f8dd0af68cc9","sha512":"23742d5bf5f0d9f36446a6d04e100c8228c6ef0fed0f5068581dd72f5761e5d809bd8b176895faa7cf5c3a0416b144d48bcf5e7aee203e0ba90991aab357d353","ssdeep":"1536:pOyFzeRhUEt689S68DAgGpZWOIOQHXDzuX6XCxK3dndbaV+:pOyFz8hUEt689S68DAgGeOIOQHXDzuXY","tlshash":"65432ac57796b02243db51d9406b040af27dda29a84c086cf351e8e728b598d96fff78","first_seen":"2026-04-17T13:07:04.535793Z","last_seen":"2026-05-04T13:31:51.275958Z","times_seen":26,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_x.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_x.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"2c3-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LXOv4MB5yDbwoBi%2FzsHCVmMky%2B9mioK5NtaGDfGDwvUHvEOzXzubycVzNqvyR88mihga9DVZyA3X%2BoKRuYphrnZIQucucjf0V%2FRj6ZjM6h%2Fi1SORD6jQ1wOqVr77ICNO4bKYRodNQZsZOC7Jh6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511b4e5f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba6b1565bc85c8116d4fccc65f429127","sha1":"9f7d03fe90877bc48fca74cb2a712202cd74c54c","sha256":"b658059fc60f99bfc27f47b7fe961ad1577dc33589e158ee8d4a3cb406e778b0","sha512":"fa5d87cb4b6e085f40130eb4dce338f8191c1483e1ae86905ff2ae2403faf6a0781933c8e7b814fa7d3112e6dcfdf18c565ab5dc1061489ed7a8c85941d840de","ssdeep":"","tlshash":"9001c096d9ccfe4c4911c371a90965f8f16a36f4321f4885a0c873137e1b4a0a54ef4a","first_seen":"2026-04-17T13:07:04.539117Z","last_seen":"2026-05-04T13:31:51.276491Z","times_seen":26,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/y5/r/m4nf26cLQxS.ico","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:46.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Mon, 11 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:EE:F6:46:FD:F6:EA:01:47:7B:DF:95:AE:D7:A3:DB:9F:EA:B0:EB","sha256":"85:B6:CD:59:21:0F:F6:A3:DC:97:51:8A:65:47:59:2C:D2:68:31:09:C8:E7:96:02:9E:65:45:0E:6D:E7:5D:23"}}},"request":{"raw":"GET /rsrc.php/y5/r/m4nf26cLQxS.ico HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: wtiJz9UTDLb49raLGCHvTA==\r\nexpires: Fri, 30 Apr 2027 21:25:24 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: AsHC6J37w3ArdgqCvJ8+ajLOSepk8LjC02VcTElRQPkjsQ7N0Y6ALKRmNVKSfKZJAOS6m6e5WDo5Iky1IuSprg==\r\ncontent-length: 5558\r\ndate: Mon, 04 May 2026 09:00:46 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=13, mss=1380, tbw=4132, tp=-1, tpl=-1, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5558,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"c2d889cfd5130cb6f8f6b68b1821ef4c","sha1":"a092b18d66896b2ef9549ae8c2ab6149160b2c45","sha256":"b96d739c3a8ac4ef0b34212c8a2b7f23dcb7b039e0dd14ef170d8e9232972bf7","sha512":"8d9b09d89dde53ab1b3ec64a6a8794c0f073cd5a1ce7e92ea6d9321371ada472859a4463c57a498f1d59a43b5206551984bf64b328b65b540029a1197b1253fb","ssdeep":"96:T779n777g/l7777F6US4MDYACoOa3Yo7777C7777D8Sg:hc/6OsYACoOa8Tg","tlshash":"40b1efa41d7074faee3b523a0167cb336777687197958c808f4dda2b1c78504b8225ab","first_seen":"2023-05-31T13:01:46Z","last_seen":"2026-05-04T13:31:51.253164Z","times_seen":398,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":45,"connect":21,"send":0,"wait":22,"receive":5,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_expert.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_expert.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1260\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 16:00:54 GMT\r\netag: W/\"4ec-19da152d6f0\"\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6nyvTWZglpTbP7a%2FIDWnPGw0s8Jifu8slD%2BD%2B6C2RCcbB9LECA6I4OmMnWrDLe4oXH5zRgkRmAQGJ1TPrKWOlHjJdJB%2FZdMVLJDT1pWgzdktz91A81S0WBwTVAHYyMWVVmhqL0Tq0r1m96x8og%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aede656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51b1bd47e9e16d8302436242974ce1dc","sha1":"217170b310321ff00706c39bf0c05e86c4f9cca4","sha256":"4c21563c120f0f93c7a2e173f7d062c1461e0b83400bf27fc99da31094338294","sha512":"b7a0b94e4287a07f610374bc8e775d07e8b13a98697ea2461445eaed8f19a0103e9f6935fb7ccebc935ba715bed6c688ffcd1fef51c733d8f2918a095d3c85db","ssdeep":"","tlshash":"7f21e7e3102c119ea1bc18e55df0b16adec3c81d44e4168abe5e0bb118d4098716a990","first_seen":"2024-08-19T14:48:30.638645Z","last_seen":"2026-05-04T13:31:51.269303Z","times_seen":22,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/brooklinen.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/brooklinen.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58030\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 04:35:53 GMT\r\netag: W/\"e2ae-19da4060c28\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUqUzdU%2Fd3elOJ8X2igDgSX5dblOa%2FyOSb336io07qo0dZwOCY0%2B7lVkMtN2CVRqULzVp5HjI9FiMFTgsYtbFbKc4Gkuh8anQyjJPkHSaR1KfUJ7gEZ2WaBFOSARwkQpkvuBjLIkkL3UckYdNzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afdf856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x1067, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8cbbac522f43521db66a2425b83556fd","sha1":"590f25061af832d411cc0e8f1de565b10f4b18e7","sha256":"ad3ba5951610027d5054fb0af1faa59885662524ba5c1043354591e024c9e7c0","sha512":"6c3dbc31f1ac7cbe428d63380fba8166b0b604fb3442c57e2ec4edc70a61ed415aa4a78da34619091a1a01ed9a1cfc501e143cbe4d48c073f2a707a594d2ea1a","ssdeep":"1536:IDZXIg7yghDpq0PqUT3QShrNMpY2pPUHtHX63J/S6/t:W+Yykq0xzQab2puWJdl","tlshash":"2543f226361e62058a60860385e5219ca354063a3e739c7e7fe6f59d3d7e11e3d518cf","first_seen":"2026-04-29T13:35:31.033346Z","last_seen":"2026-05-04T13:31:51.281505Z","times_seen":20,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0257pdz1-imal.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0257pdz1-imal.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"2481d-19ded5c5064\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAoKYPOsaiYi4ttUFiyA%2FyAbdyK6tjejFOC3KLFXmWlJNfMxmIdVM9aLfNhvJ9EJZHU%2FNUMg3vQgiwRy%2F26V1iwyUrNjf5EjWD8y3y7o%2Fut1V1qMS9dAPkboKi3jFFhQrAU7yQrpSV2ZIBil6Ks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b2e3c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149533,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bcd237b85d571f5accb316fb293d4542","sha1":"90213d4a5044267fd43fb17d005b8e7cb4c38421","sha256":"ad09de164a125738fcdd0e64b980a00055427f88d760d279a4e75fa233a14187","sha512":"51df5cea0a003c01f020c13b3af67ceefe1324b9c0dcd2fdb435bbd3c2e85fbb2e6a4bbc6a67ec65630a447f889b5a5ab87f250e5cb881dcb3f7b84ae7d77f03","ssdeep":"3072:6D0JgzlSo2HZWTsGIO0yVA9zEycNv4Z1ba1JjK75B:6D0JgzlSoCZgIO0eA9gyc94W1JjKB","tlshash":"f1e3f8f935d1f48207ab50aac03f0006f22c4db7189e6860e3e5ddda756465de1b3faa","first_seen":"2026-03-21T01:08:02.25906Z","last_seen":"2026-05-04T14:37:30.384748Z","times_seen":346,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/turbopack-15i5dj196a4l8.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-15i5dj196a4l8.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"2954-19ded5c5058\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StAJaIuBGsZge3uRwETwV6O2viWBx5Vm%2FcBhlgCf4%2F6tJKVJLGg60oyDMnt1NmD%2Bgl8%2FoKIqEav3bCxK2YYNupApwLM9fYvZQbFPO63%2FDHchnN7kV%2Floduf1rN9rj38bAipNaYSaO37wUgi5gXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b2e4256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10580,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"9817a86ca5d13f095de869ab700880d2","sha1":"2bd99472d8ec1be73e6a8998a4a6004f6f67f4b2","sha256":"6a65c3f508f2ba1fb1506a13b28c4a53f53ed17066c5b8c77caedff2cb386c11","sha512":"7d6174401b6617070ca061f9ce09a33e9271276b385fd850ea4f8c08cff08cbc7da00e47db524ac4b8fbc1327076a1ddb2a3308fc14c697802bbf81aa5bb86e4","ssdeep":"192:v4gMSBC88Esg6+9ErUO/lO4jTNWn+S3sBT4fCT3cXXqroor2:v4gMSta/lrW+ssqCTMKA","tlshash":"c322d8da37a6f073436f94e7d06f4004f17984a9145d141cd3aca8e72c394aa85e7f76","first_seen":"2026-04-17T13:07:04.508628Z","last_seen":"2026-05-04T13:31:51.282645Z","times_seen":26,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/videos/hero.mp4","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /videos/hero.mp4 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1926223\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\netag: W/\"1d644f-19da05e68b8\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 11:33:55 GMT\r\ncontent-range: bytes 0-1926222/1926223\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OinVXSq67Tkh%2BWzcV%2BsPU0dfMInJGwjIr3HzKgkbqu57uyRRj%2ByWovob914s%2BHa4z4TLhyEzeuCYaFprAcXuHWzuOu3HUx%2BTNZ32fIStO6r%2Fb64ThPo8u%2B0hjWxBFoiId2A%2FFTJknzf6LoZh%2FP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c0f4b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114395,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1b1502b5f4b67649b30b01933bf025fd","sha1":"44fcb4702e411e051bb8efda0402fce58cf06c30","sha256":"bb361823da6642e0619bc4afc7fcc00de5dd79185a898f04772148276310c537","sha512":"0671c08253ee4378f64c63a07f9edc602a35a8005e4d5d82c1d2690c165837e692693e76292ad526656a98b54d035d5022b9911db6a4625bd04bc47eb58cd878","ssdeep":"3072:DAzRcHOGOQulLXX4KeZCeSjWKHFWpcRk31n:ifGOQulLXXa51KlWpTFn","tlshash":"60b3121097a66224e3049c7244e82a25bb73ea39b54f8f6b172d807eff55346dc21f9c","first_seen":"2026-04-29T13:37:09.948203Z","last_seen":"2026-05-04T13:14:17.374324Z","times_seen":3,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/videos/streetwear.mp4","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /videos/streetwear.mp4 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1243989\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\netag: W/\"12fb55-19da4038f70\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 04:33:10 GMT\r\ncontent-range: bytes 0-1243988/1243989\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDjWBplHSzm7AFuTpWjS%2Ba3AtnN%2FtzwKYGv3vqsUQCpuLdd0VrsmJnYL4bwCg2s%2FUTLLNxpaLK0vZPfgFPmvcx1YbqMAvEpba4mZZC%2BcF%2BYkILZWryMoIuYNKizp4hyHAe1xvrHo7k8RBt8OBhc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c0f5456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1243989,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"13872f7fc3e4887cff469a72d1f70281","sha1":"44bce4d2f333be44e442c96205ca4c6f145c6d98","sha256":"b9001f8f7c41dadb2f8030eb6c007591652c46dce84d37b7b671da0e6c36d5b5","sha512":"682afe5444a0da197caba1714e63311f56324fc7d3c9eafe996544b0d52028e938c11451961682e5e942bc03771c13bf722de3d08f58acb8ee124a80e1675337","ssdeep":"24576:mPAeawNfRsp2TXc+nlx9mvmJ4NNSJaZXmfE0G4:mIkmasqx9mv3NSCge4","tlshash":"922523ede7c75b86ebb074b0880787a9f770e258028c5b979d12c1410d815d96bfbeca","first_seen":"2026-04-29T13:35:31.044213Z","last_seen":"2026-05-04T13:31:51.266719Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":1076,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/api/ip-location?ip=91.90.42.154","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:45.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /api/ip-location?ip=91.90.42.154 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLIjS63NEnIQgStPmU1ot4Bg8oQVjO40%2FczhwCAwkxQnfZufQM2fkzYo6Na4ern%2F3A8JidFRpEpYTW0AXyQ97eXYTJRUUs%2B%2FZ5hM5Wa0oKMH7El6lFdERKB2ZGibsX5croc%2Badm%2BS6NU2cYiA%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511e79d756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"614cb4b23794d65e6ff7e059f0ce6b34","sha1":"d935a57b9879d704edda83a1c075fab531549d3a","sha256":"18d0ffc59640d718ecf43e851e0842475a1c098f8a55a60a3f39b59a5b3fc0a3","sha512":"f4d899258c97875b2dbfd74d7891e38fd38109535012f8daccc5460692fef1b97735b450518ef92b6cec9cd1896a2b8f43328a080f4e55b83abd6faec4468149","ssdeep":"","tlshash":"42d0c2ed18342e28b86b928c920ec91333fd5105878b8591cedd7d4ca68479eb40691b","first_seen":"2026-04-14T20:50:38.080166Z","last_seen":"2026-05-04T13:31:51.284292Z","times_seen":392,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/media/_pkMfchyeAZ-s.p.0_tant~io3df6.woff2","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/media/_pkMfchyeAZ-s.p.0_tant~io3df6.woff2 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payments.credits-center.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 183220\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"2cbb4-19ded5c504c\"\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SGopTgZxWo2b1tAHQbV4DzpTB2WPwUTT0lTO7UEfe2ZoCm8hcyL2W0qfFcxhWHzZhE%2BL%2FFeMaaIkDVXjmn96hmRZy1IBjG%2BVXIEwAQMBzauNhh3DxwMIjTCb4L5YGJYFps2DGHXHO2Db7ADaicI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aedda56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 183220, version 5.0","md5":"c0254118e3ebe12378022bfef999912f","sha1":"8ac9051c56091acd2b31036d8cd37bcf2f36aad7","sha256":"0dce730051c3b1526526743fc0079505bdf5454b79f6ec1c1fb2a7cb26350694","sha512":"2014dd6332c3b1e6e4691533e88e66651d227cc8091274beb7aead5766bee626d7332b90328b46c7a19a5874ce9d2db52436799af9ab1448e9aab7ae4139d636","ssdeep":"3072:f6pPcK94Pdr1Il6r0/2TDx3rIYZ5gX5GaShNqIXIzmp3YuYb8:fdK6Pxx0/2TDx3sYTgpGX5IzmpIud","tlshash":"a20412816bd0a4c5342cf6c5caaa33fc845955e4b2de4c4dba3abbc90670da7950ee43","first_seen":"2024-12-03T17:14:56.617992Z","last_seen":"2026-05-04T14:28:09.512031Z","times_seen":13237,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_message_color.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_message_color.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 08:34:52 GMT\r\netag: W/\"55d-19da4e0d7e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pve5PczGbHF%2FA7vjUudX%2Fl8PS1swZ3u5OutYPIOMt86xcG9YPROnfJnO1qwUGymG9tJGou1u%2FjG6SBcDdJomYyfjyOQb%2F4UgtJvHnNbVFPitwLTecwYXxLV69UgGrIorB%2FmSNf4vxv4ltEgAc4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b0e0056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1373,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"144c3d8996c1bacec0a9448a9404356e","sha1":"c32b4ac307282779de4af01f5a801748647884a5","sha256":"7b121cd4877c5835a7dbe91aae9df0cb876cf5d1dfdbe052b8a52267b0be7b4c","sha512":"1c0afa222748bbd786d35228c24699dd8614d928cb43a3c6924d694943f39f588854348117be46b676ec1e9a9f12c0c06ff695405c880b44414b9872ac70edf4","ssdeep":"","tlshash":"7c21acad8015cb2ea5a463fc891434e43056bdbe6df2c200d202e52b1d7ea9d4d4d696","first_seen":"2026-04-29T13:35:31.025014Z","last_seen":"2026-05-04T13:31:51.258768Z","times_seen":20,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/ads_manager.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/ads_manager.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41886\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 04:14:25 GMT\r\netag: W/\"a39e-19da3f264e8\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ER0qKhtEzZDcUnlf15%2Boj3arDoc5pzWARboxe6NFG3BTiiBRdyKeTL001BrRSL6uZfIR7Fqh0fi2zmxGEIpuFDX3ZddwrFderbF9hEUDBQEY0JUpl3BRROuo6DXFkHCvU7yGk4ZJNILPQGL5O5I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b4e6456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 608x758, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92ef0ea04a98043943edcd7f1ec3d04a","sha1":"49bafdc564594a994968fde729c1f06b1c01e5d7","sha256":"fc7878225fe7bc1af092e4d260f2abeeae1f522770f6f8e9ea94bb2dd129ba96","sha512":"8b3fe6c895a4d78482d86e93c107f68302971d471dbe72c3d9e658eda89868ecc0db9e55d8628336414d45090c75703fad490a66f92dd722256553fe54faca9f","ssdeep":"768:s1FB5CzIyz0/7h4KuvELj4rpNdDtEQhvHCCvRLzWoieCglHDVmtD6YoCaptA/NTF:s1Mz1YGGupNsKPD5CglhqD6YKSZjH","tlshash":"b513f126f1c1e1f7673ca71ddf2e6a9c19cd2ac05736a2682d150678ad84064237fb7c","first_seen":"2026-04-29T13:35:31.019349Z","last_seen":"2026-05-04T13:31:51.256302Z","times_seen":20,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/videos/support.mp4","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /videos/support.mp4 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 242498\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\netag: W/\"3b342-19da5095710\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 09:19:06 GMT\r\ncontent-range: bytes 0-242497/242498\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eeqyP79sW7dj1at81t9AL3jwLkdvVKfARKqYOwTrKreMAQxJVYoklI2xY0QQgnnbqpBz09FoqshHxJUGjpnN%2FNQ%2BXtawoNw2hdjYAQ5%2F%2FyFaHyN8QY4iCllrsN7pG%2Bla8%2FBzM%2FxNfT%2Fws1yUtHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c1f5b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242498,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6c62cb2810ecc7d0b7c76eb0940a0232","sha1":"72651746d6e40d4f62d385d58d7906efea3cd349","sha256":"cbe051d6eeae76983d4631e1e0c6d3e8ac037573cf40029f163a81810aed77ed","sha512":"f9b4396b23f8fba9e2c07c4729ab874663e023ee5f95f6690034ab77c4411c628f8be9889a8bf0edd4c3733730d4256ba533be2cbb56c90e43f3e701cc0d5b8e","ssdeep":"6144:IEBmG1hTf4T2gH1OX6GEtBc1L1iIn44dQ9urEQA:IEhT2rdIL1is1IF","tlshash":"c534120a772d703cf57503fe1c8a8582b79cd2013a965bdbddba843a19b8552dc32bb4","first_seen":"2026-04-29T13:35:31.02959Z","last_seen":"2026-05-04T13:31:51.267763Z","times_seen":20,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/background.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/background.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5030\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 09:32:01 GMT\r\netag: W/\"13a6-19da5152a68\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvpT79v%2Bs8Z9eHQzLjgqS2M0%2BtBuOAdSNNPQglb6P1dVm0fg%2FbIwmNLzxPPDDOLhSXFakKVh4N%2F9hUxrwUJqIKUG6G8yVDrEDmJz7zpczC3Ct9srTAEcTx4gT8yDP%2FQ6WxkoGzfh2GCe4XXJRVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c3f8956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x810, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"794f155328a5167a11b32f9f65395d8b","sha1":"55d2a55f4ebea924a3ec7d76768a088204c739e5","sha256":"5caa2e52e3dc5bf216a0d522bdee26bae92f06a62a9a4878f8a25b1cd91853c2","sha512":"bd909b0b6309f3e8c6d32c91456df4ca43b3ad4f5bdc0044b8f6d1bcd790dee2daf1064225ba3702b935fdcbc5a8800ef081faa20e094ed7f5a72c98b4a2068c","ssdeep":"96:pYDnoyZGuYNiLVqWnkTz34DadNOaDFyiv+U7Dv/qeNJ+ts:pYrpYNIZqI9K1GU/vCQh","tlshash":"38a15c3d2ec22874481a39a1d1df4e40e8dc6035a366a6eac77617345e5792ecf29f0c","first_seen":"2026-01-06T15:37:45.725028Z","last_seen":"2026-05-04T13:31:51.283736Z","times_seen":35,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/api/notification","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:45.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"POST /api/notification HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payments.credits-center.com/\r\nContent-Type: application/json\r\nContent-Length: 311\r\nOrigin: https://payments.credits-center.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":311,"data":"{\"data\":{\"timestamp\":\"2026-05-04T09:00:45.607Z\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"url\":\"https://payments.credits-center.com/\",\"location\":{\"location\":\"91.90.42.154 | Oslo County(03) | Norway(NO)\",\"country_code\":\"NO\",\"ip\":\"91.90.42.154\"},\"lang\":\"no\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:46 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4%2FXWuzsKDYPp1S3o4jh%2B1Ld%2FlRJMonEViNq7%2BJemihwHxAFlmjfvIY7EOzeMARfKUGVl2WC%2FdIy57SB4%2FIwEYudKq8E%2B1vNRnU%2BFnKNq2EOhcsdc4TJ4jcj%2F9TIYwBtwHZJuF7avFOW8OjRI70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f6651211cd956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ea33ab4b8442ec9a78adf86910ce43d5","sha1":"6d635e5d6ce2272e797f8fc8f9a386189659e0da","sha256":"11e572a358a2aee25b0b9fe21f23d2111d73bd4b3226ff87dc4d108c9455e41d","sha512":"486b716e590dd488daf0a378f91a43bffb27974235c7b3d2000248de069db0310e836e79f953016a362faa35dfddeea8f4af24f8fdee8659bd43e81cc5f12643","ssdeep":"","tlshash":"83a0228e20af0c830f038a8330cb28000ab300c02a8a30330cbfc03cc20002cc3230c8","first_seen":"2026-04-08T19:59:31.80267Z","last_seen":"2026-05-04T13:31:51.271597Z","times_seen":58,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/media/caa3a2e1cccd8315-s.p.16t1db8_9y2o~.woff2","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.16t1db8_9y2o~.woff2 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://payments.credits-center.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28388\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"6ee4-19ded5c505c\"\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAOB9Uv7aExOZ4duAyKgz4B%2FlwLc51oBgEu7C4QGZ06JS9t5XhQS4NQArAk7KlBVEmFS0xFLa9xjTry1HxwUBpFsSvgCdAZi61uQTQfVttN4L605Ibh2N90aMuftSgKEXmrDB1ZPnSq9pjWqGcU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aeddd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-05-04T13:45:20.739917Z","times_seen":19534,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_solutions.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_solutions.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1288\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 16:01:14 GMT\r\netag: W/\"508-19da1532510\"\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPMiCc2DHTY0nZq9rwuGHxnNLKrHSFTmLFrejjBVnX1rhmvn1qi3ITE8VQPDNO%2BkiM0vsphj16N5tCEEVGaEgpkxtf%2FGS9uV4FZQO3SpzlsLeIMHke8b72O0UO%2B12MMIO3b%2BVt4I7dyu%2B0DNwr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511afde756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c430d56ad4ca3211464d2c8c4022e0d","sha1":"ee0a814e40ec034e498c7924c96899449e28f441","sha256":"d4cf06b805484416a21f1495dfde7b708a80a64fb38eca5ec7589c6c1b9a3068","sha512":"d2cd5d2ab00efe7e3007394f7ceb543ea835b8700b49bedee13dd190c145b8aa325d218763f1e8d21f7bea854f141854b4d5578241cb67b8a5d47cab329b8ba5","ssdeep":"","tlshash":"c421c850c2e94ab3dcf5553f1e9e3ce1b07b13d4d74a20758e8a2d7271c184421b2902","first_seen":"2024-08-19T14:48:30.639977Z","last_seen":"2026-05-04T13:31:51.254746Z","times_seen":22,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_instagram_color.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_instagram_color.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1070\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 08:33:13 GMT\r\netag: W/\"42e-19da4df5528\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0z8wxmX3J9SfjqgMMQDrWntinjgNViHbWo3BNxV6e1A83Jtb9RWOqBsY2UdNVZvN%2FDAzNQXemrfMhiHOXthQIQfHwgEU3zzGGmALUfJl0%2FFQdT5JERXQeB7ZP5TiCfDp3lMUhRQdoYxsyQ%2Ffio%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b0e1456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"562f5adc5b04c3f3df944e836cf324c6","sha1":"231e33ac520296fa51bc6059ded42628f799f7b5","sha256":"50765eed976fc9f5cbf100aa4744aee5367b46348305b77b6335e2c0ee54b5e6","sha512":"be12734fe2d08277db478db2102bce16b54593aa29c6fa66b1e6e3e917eff49629d226d8e44be1102d84a3acec928f2028414e287e392086e277d9303be6b3d2","ssdeep":"","tlshash":"8611b5cc7ba7e293e72509747a43b9ba3c8ad974043b62842711392b28e82084279cd5","first_seen":"2026-04-29T13:35:31.028568Z","last_seen":"2026-05-04T13:31:51.27511Z","times_seen":20,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0ht900cau6_ur.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0ht900cau6_ur.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"4442-19ded5c5050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0nB2d0VxLNj9OUgUY6T%2Fd2R%2FpdKjduAQX0Ft1qFlilQf7TQrCYaCFjj8oILjW60scHvfJoprBq8Qa8S5%2Fkm8CmeqxJps0139mZ0E1dyfBchR2jz1sbuKBzWkvnJvQ%2FTxjR7LzRX08OYGlYwCvs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b1e3156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17474,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14040)","md5":"7dc6da5c31828ba9812b433129a805fa","sha1":"08785ff61957064e03ce08b4a2a60ef9e0486c09","sha256":"b2b0fb9dbb3e38abc0110efd9dc4c5ec29e2e7c6cff449d61c95f354b4014f5b","sha512":"336ace9d3010cb1f560acfd7449d4478a891024372917fd9724ac7ded5bc8c54b4204889846b17c52bcd6928042e545b3da28d879dfb222dde02c8039efdc87f","ssdeep":"384:fy7jBRxWAOvk1llGXFpyl+vT3mrxKHHwyUaZgDdkmKDUEbIMbh:fy7j4LvGlsXSl+vT3mrxKHHwyUaZgDdQ","tlshash":"11721998b195f04127b360a9903f600bf23928752c6cd4b0b396d8f56de04ade937fda","first_seen":"2026-03-20T21:03:58.57204Z","last_seen":"2026-05-04T13:31:51.262961Z","times_seen":182,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/_next/static/chunks/0dgq26a5_oy.a.js","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /_next/static/chunks/0dgq26a5_oy.a.js HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 03 May 2026 10:22:23 GMT\r\netag: W/\"c60e-19ded5c505c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 20739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HChFyPHfqZuCFwK6t6a1fygK94A%2BdUF3%2FNo7%2BWWGLa%2BTlOYoq%2BgxjmxISWBbQiUdOCvXRZgeiBbnDqdwgj%2B5fumBzWN3otVFcDdDXOcFVAOwNkvxTlruHGgaZRfyU1yRZXvf20vXKOkhQIrNiNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b1e3456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50702,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27708)","md5":"5f5191b9f61efd6a4f63c5ac7f5c6c41","sha1":"a2b647221f67abacb4a57c79b01575f565cca4eb","sha256":"69a6bb99c3ffab75664c38bcf12faabd4bb9dc7e300605c030168809b21bc0b9","sha512":"eb580a3267a16fea1f40c5b8ac5b596c45ebfc32268d4f7028e6dc3d97218133370ec6ea1771d0a384eeac3e08dbfbedf73333f8de4f5d6188b102d63982eebf","ssdeep":"384:57/ZdkTd93jnTUYqSGUFT32IIIq4emi0B/d+3W16DvXxqpkKM8wjn0ieI+wQhNoT:V+qSNl3gId1B/d+m1mvxqml1jn0iP5","tlshash":"a633d7b232d4faa2539341e0d43f2017f2690c75206d6474b7e89cdb754c88da6bafe5","first_seen":"2026-03-21T01:08:02.265897Z","last_seen":"2026-05-04T13:31:51.263465Z","times_seen":303,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/meta/logo-meta.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/meta/logo-meta.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"1742-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUV2R%2Fy%2BNJ9cfXFJYS40KZS8gJYP5G5tzbaDDJy9tI3pSymcUB%2FKte56LVe2WIc09RVPHmDAKCKSoquMrHyVo3tYHaL5cFC83rnTZH%2BQu3ShQBu3cRANM%2B3pankfrf3ZrZ7%2BEbSTaKm5%2F4zWsb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aede156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30a3c11ae54ad0886e58f06807dae7c0","sha1":"258ae9ca7abf8a4ddb0bbfd67ae0861dc26e5b6c","sha256":"8b2532078b98c5a4676457f8984a7b4af32ac2a83a277f4d16e28c1856af4b50","sha512":"8a65fcc997bec670cfd4b0eea8accc0218b7a76a5fede2d28fa647f52876df722e617cad10cea0a7d742461c1e4a99cd85b0285064f65856b59e6ff0550d32da","ssdeep":"96:aPla2Z5/YNchEHKP4VvfzG3BoIBWXJmkv6w8jSWz5ZZH3Ag5tS6lMpLnGNqfNb:ElX/qCEH64Vvf7IQXamW7ZfpMtnGct","tlshash":"a2c1c5ad63f93bbff114e7f9a602a4b531634582e9458410c3a8fe2f6c5a45e1c194c2","first_seen":"2025-09-23T21:34:56.2517Z","last_seen":"2026-05-04T13:31:51.261978Z","times_seen":147,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_people.webp","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_people.webp HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 18 Apr 2026 16:00:21 GMT\r\netag: W/\"49e-19da1525608\"\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6xG7Uxuwo154KaCvcLSaqOLi5dgVf6qi6WKrK8PtTdklBl%2Bq%2FhT5AEJonHaqAFQMoBaNDDPhguxlpdnTC27RWneTEICZOsQ5nqLSocajJIKbUvolrwGV1J90PSs2VoLZe%2B%2Fg7k4NJEVMrGg0V4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511aede456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70dfcd1d7de30ee7ccd6dfa79d3d17d4","sha1":"9a02a922640cc59dd1f2579255178ca4920d9507","sha256":"69de148fdcc5f9aaaee4505c4d50ce59d89dec3ae648add04e8d31213f6014d3","sha512":"5740de08bbc5c2796c898becb3246ec9d523d3c431598bbd73fb0cf51babec7bc55cff6e85fce654fa0ad669629b497c0bd6bea9a296b98457d223ad909069f8","ssdeep":"","tlshash":"db210aa2896c250fb1fd64a0efdcfa510464c09d5000c18b2dbc8df7b8f8c859f9424a","first_seen":"2024-08-19T14:48:30.63789Z","last_seen":"2026-05-04T13:31:51.272233Z","times_seen":22,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_arrow_left.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_arrow_left.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 03:07:49 GMT\r\netag: W/\"2d9-19da3b56b88\"\r\nvary: Accept-Encoding\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6ku9tMHqdGWE6eISR9DnjxbiG95B5CfENUkxELRRCl09ORdUsvmXHMto%2Fqop9syQy0wBX6xDPWYcEHizk%2B6z4avT0DG84%2BXfYnXrt3APA6MO1o6cj0Go3Jk7WYhvhY5ABs0irXy3sOM3jEjXLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f66511afdf356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":729,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d86140723430bc324912d0cef58c582","sha1":"49d759be24c42989e7762c5c2194f8f4b8186892","sha256":"074b5baa5a998c6ddabfd8f20c016aac1b9a093b3aa5c39324c7cada3e82e9ff","sha512":"2660b50eba4df58125830737130623f946b7e6ed169f3043e86895cfe9a2dc477050e8c71e2e4db60513f3c8c16104d676162b55b60161a58479158e96d4fe58","ssdeep":"","tlshash":"5501c0ea68f5d5d84a87de75ca3098d3e1602cf01e14439815a1543c3c617f18904dfa","first_seen":"2026-04-29T13:35:31.027433Z","last_seen":"2026-05-04T13:31:51.276993Z","times_seen":20,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/images/icons/ic_facebook.svg","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /images/icons/ic_facebook.svg HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Mar 2026 17:10:40 GMT\r\netag: W/\"4ed-19d20d3ba80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIRRA0m2oNE851%2FoRI%2BENunlLhspC0oIHdZejAlMCcZZNJ8JS%2BZveax%2BU3RmOT3idm9AQ1D7fd5AXfA%2BIZXlE44f98CYKZOM3BGVG5Lto3f29Cwqs46wc6YL0Gvc6n5yDVf46wSLWbocrCb1zkk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511b3e5356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1261,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a48afedc27bd2802479d3e3b11bb670","sha1":"fcdb2a2956154d3b4f900d3eaeafd8181aef4787","sha256":"f62439fdba1a1ddb71b19477a187a2801654d85d93550f21a3c0484e8dee28d7","sha512":"1526d9dfebc02b06b5bcf1200d3e57d9ec2b5731abd1ef6d32d6043b2e06f9b7e7a673030a3c96e5d6b7a03acda0d0c57ad34a5a52d033af51e69e39ec4e806b","ssdeep":"","tlshash":"c42162d8839a89decb98d3f480107c6384ea3bf19d4286d981983737b2a649c9d61bc4","first_seen":"2026-04-17T13:07:04.537745Z","last_seen":"2026-05-04T13:31:51.25119Z","times_seen":26,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"payments.credits-center.com/videos/ads_manager.mp4","fqdn":"payments.credits-center.com","domain":"credits-center.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://payments.credits-center.com/","date":"2026-05-04T09:00:44.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"credits-center.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 03:47:34 GMT","end":"Mon, 27 Jul 2026 03:47:33 GMT"},"fingerprint":{"sha1":"A3:6F:AC:F1:69:C4:E4:6F:A9:FE:F1:6B:AA:22:93:B1:2A:EF:B6:4B","sha256":"90:7E:49:9B:8A:9B:E5:95:20:5A:04:2B:FE:01:6B:18:B7:23:EE:E7:DC:17:33:AF:5F:A1:5A:CB:94:C5:C0:A9"}}},"request":{"raw":"GET /videos/ads_manager.mp4 HTTP/1.1\r\nHost: payments.credits-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://payments.credits-center.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 04 May 2026 09:00:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 224647\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 19 Apr 2026 03:47:35 GMT\r\netag: W/\"36d87-19da3d9d3d8\"\r\ncontent-range: bytes 0-224646/224647\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2CD9xFsjjNV2RY16nD2%2F9GYBqnOiX9xARWZsxf6M9nm9lyVb24bslfsujQv8Rt%2FUYoDcFVV%2B76v4uzfjn77UbVNz05WDR7Mm%2FmE4hHMqP3a%2BB5og6LHryPxxmO0U06ENUiVIFWt0pONUy0nyaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f66511c0f5156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224647,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d4c27018be3f8fd355070072e5aa95ad","sha1":"4319b399f96e05bc790645dea27997e92f3d6df7","sha256":"19285fa0d2cc3d20983e489d6b189808548a20dafcad1e110d9f1092d69728e0","sha512":"bbf57a577cea71eaf152c4732accc9d92cd75334223fa520bc584969679e6ce5aa3be8e16fb9ce707114b049bed3d7f714a75ddd32bc302dc7eb73a4af2236f0","ssdeep":"3072:GjzRKezHgU2rpQ3ZsPrQ+yM/2JFK7uXGyw66TNg/m6djOb8MW4xk33tlVdY5v+EL:G34ekrqJss+z2su2yS596RcF78dfO5vP","tlshash":"c724f1b337d01b6ac79adbf18da417849af0ebe9445f1f27324e22992c07a1c0d436e5","first_seen":"2026-04-29T13:35:31.026099Z","last_seen":"2026-05-04T13:31:51.256773Z","times_seen":20,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-04","alert":"Phishing Block","trigger":"payments.credits-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-04","alert":"Sinkholed","trigger":"payments.credits-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}