{"report_id":"7686ee23-b46d-4326-80bb-d0e685e69e81","version":0,"status":"done","tags":[],"date":"2026-09-30T13:28:32Z","url":{"schema":"http","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"title":"one2pay-home.com","dom":{"size":85012,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20410)","md5":"90ad2844783b3efc5b4ea22d839462e8","sha1":"6b3d043189d41afb725d40fc38e9a3e3797754bf","sha256":"df2a61f9875e7cb81f768d11c1461a6c909e6badc33b6040b51d9e4ceac079a4","sha512":"3f3ce33beeaa869765ea3d50d8b0b76431db8ab1bd8b4aa40ae8ec4302df6298d61d09d3640ca089747c74fb1a53fff7973db6ffe373710231d87f547e004781","ssdeep":"1536:US2apQQG2ZVz0IThdbdjZcb6emlUVuXwaWsZ:USJeAdbdjZcb6emlUVugaW2","tlshash":"9e83b46052b448f97d3f836dc584b728b648ed21de8666e6b4e2d05868ccdb709b730f","dom_hash":"domhash8a95e7445617cdb1f67a9b6e9421e4ed","first_seen":"2026-09-30T13:28:42.960434Z","last_seen":"2026-09-30T13:29:42.434166Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-04T13:28:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"one2pay-home.com","ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-27","domain_rank":0,"first_seen":"2026-09-30T13:28:38.749455Z","last_seen":"2026-09-30T13:28:38.749455Z","alert_count":14,"request_count":14,"received_data":1231680,"sent_data":7235,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:6.5.12","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","size":18726,"data":"","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-10-11T19:44:33.558716Z","times_seen":105494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f52671e3b5f376fc78d65342f2c1783","sha1":"bed970e666cecd323ee4aefd696d7ec0a6bc370d","sha256":"bd21dcef07181baceef18a85b1d84aee7573a387f66908f035e85a74d8c0e7ff","sha512":"12ccce124a1552cb51cbe31063411d81648b94f6f733e030c991cae6cae40a9e3ac893f22124874c4e08c06befde85fecc82e914b0c6fc4789cd3f7a79595d86","ssdeep":"","tlshash":"a561b79a37793887317715d2aa2f0e0beb7698371688d034c9f9b7541cb1863c33ad49","size":3227,"data":"","first_seen":"2026-09-30T13:28:42.976415Z","last_seen":"2026-09-30T13:29:42.443591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e4d30c8580041a208d484a5161595db","sha1":"51a433a521711469da2698a35c829ed575206d0e","sha256":"4907e3bef40548c29e64a07d7cf9805f6a8745018d2396b45f3fe8e9e27fe90a","sha512":"6f3948b3cf063db8f6335366d948ec455478cae6ac3fe844cc885afd02ad6f1f0cce2647c766e5f163307d210ab71df8f8295d9d72739ffceaca35b6fb0ef7f4","ssdeep":"","tlshash":"e8d0a79b8ca872d04b8403563630d6be38746629ee80d5ca281d1d444278ede484ac84","size":217,"data":"","first_seen":"2026-09-30T13:28:42.977449Z","last_seen":"2026-09-30T13:29:42.444266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"538b65f2d93d549eb647289b9db99fee","sha1":"c493fcc29ddf4a87d706cb0d09c4dce3401ae6b2","sha256":"37cadf5b837d29548c1bab8ec680a50769e9c820dd75bb37092568e1ccc94b0d","sha512":"035d1b04efd0f228cb842bdb1016f11cc6a07c76d28e7d6f1aa7b1dedbf46049c5623c33f5d465c7f2e309d614e76daa8070b29d251a51331a9226c42d765886","ssdeep":"","tlshash":"e91189c0b20506b400612529c4380bc9e6b9699cb6db1ca7cc0c9c2cf1b261f45b6f7e","size":1012,"data":"","first_seen":"2023-11-16T22:13:18Z","last_seen":"2026-10-11T05:52:44.527936Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/blocks/navigation/view.min.js?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dd354b759c9108102c93d8bae0573a1","sha1":"b27ba805d3b9118edfd523f01fd6e84229d52ffd","sha256":"cef72ad53596109595c152da16e28c2799d53b4c151274c7b28c0324e7230f24","sha512":"e991ea5ac4eb00dfaf2db40d608ec4face0a75df2199372e4ea03c8d0392d0402257b27fcbe334c17db86ed32da0b6b57f55a1c13f84edbd5dd56fb56e72e798","ssdeep":"","tlshash":"83610234306575b1aafe5be8f3148528a3148581240b78717e1cb9ee58eef53d1f0bea","size":3300,"data":"","first_seen":"2024-04-11T09:16:20Z","last_seen":"2026-10-11T05:52:44.514336Z","times_seen":2614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/js/dist/interactivity.min.js?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dae4309ccac590262c4e6914f1bdee42","sha1":"94d22d48979f46560d1c7ff46978bfd4b67aebec","sha256":"df8d3d01743dad99fb13e9a7f1e1d1705e403eab0576dd1a81c45fcc42086a5b","sha512":"c157902e643d1779a3aa8eb0496e8615228e11b1afb76d53fd1c9409583c50302b8970d993ba42fcaa468b196ed60e32d053e1f66c4afc125db1631661110093","ssdeep":"768:Wh/w9POhKH5e7q2Y9VkujcFlk3HIRPrxkyRQZLC7jl7eLFLN8l9UbIY:WhY9GU5Kq27/wMVkyRQJOZ0FB8Qb9","tlshash":"2af2e8a4b174f03143ea50a6907f491af336662c744ec0d0b766e5e63cb924f60a7f7a","size":35085,"data":"","first_seen":"2024-05-08T05:56:10Z","last_seen":"2026-10-09T00:00:48.064804Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/blocks/navigation/view.min.js?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:01.810Z","timestamp":1790774881810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/view.min.js?ver=6.5.12 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Apr 2024 11:03:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66152080-ce4\"\r\nexpires: Thu, 01 Oct 2026 01:28:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWuFjmfSpVyh9yG1INgLIhCE02OeIDIy1tFUMVsS%2BRMjLUSMQEQrrZpxeW5GHD4B%2FDUewSXeSX6QkL2N2pe9HWIHpyw5C6pyPvkTIp0j0A43Mv1dFrDE0LpbZvJHIMGxp7Qq\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43391835f961a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3300,"size_decoded":1924,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3300), with no line terminators","md5":"1dd354b759c9108102c93d8bae0573a1","sha1":"b27ba805d3b9118edfd523f01fd6e84229d52ffd","sha256":"cef72ad53596109595c152da16e28c2799d53b4c151274c7b28c0324e7230f24","sha512":"e991ea5ac4eb00dfaf2db40d608ec4face0a75df2199372e4ea03c8d0392d0402257b27fcbe334c17db86ed32da0b6b57f55a1c13f84edbd5dd56fb56e72e798","ssdeep":"","tlshash":"83610234306575b1aafe5be8f3148528a3148581240b78717e1cb9ee58eef53d1f0bea","first_seen":"2024-04-11T09:16:20Z","last_seen":"2026-10-11T05:52:44.514336Z","times_seen":2614,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:01.823Z","timestamp":1790774881823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:02 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 Sep 2023 16:46:22 GMT\r\netag: \"65130ade-4fbe4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sc7xavUr8Br0J0g1W7SrxUROMRMfFzDeX7PrfH7oXBc5rxFDOPOA2fZgaDl9t4yz%2BM24k8obf4ceDO%2FZnXXFpZbd8%2BT5qq5eKEUCD%2Be7srayOeoVJAZCbogqXH7bDZ8JXqKz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43391836faa1a30-OSL\r\ncontent-length: 326628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326628,"size_decoded":327368,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326628, version 1.0","md5":"9c9cff93a0d5a209225c1bae18d80a9d","sha1":"40546dbfd5c467c3257d8f3a4ad8af0d9995aeb6","sha256":"e931823ffd0b6cfd1624e3a7c1c49861ed3420297862e727f07e04c8be1cc89b","sha512":"6d60eba8b9ae8b8b85ac93d4da1f3ecac3d8472e9821f9a580ede27ed778b5aa590a5083ccb960602cc2b9d345fa17ed67355cac4a1d07427b1b4330a63abff1","ssdeep":"6144:xfpkCcEWnNlAharQ/P8TVcEbGEDyfVxBe3n/uhWxWFrzW/K/M/4GP:xf2CcnNlAwrqP8TVcEbgV63nqWV/6M4U","tlshash":"7b6423d7562e01f6ee6e19a700855e73f8ee2a326f7cf65c7c43a8f938a1c1464421e1","first_seen":"2023-05-10T07:09:06Z","last_seen":"2026-10-11T19:02:52.908428Z","times_seen":16564,"resource_available":false,"data":null}},"time_used":1634,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":822,"receive":812,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:01.837Z","timestamp":1790774881837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:02 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 Sep 2023 16:46:22 GMT\r\netag: \"65130ade-19ae0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMVsIQCEj5Rx%2BVv29EVKj6qk43JLbYVnDCr%2B81sxdIE0UTtI5eS2C7lLJqvhG6nEQaGUcl6mOy76KbW1LDELqZOGOJWuFjArBnjL95uWmCVDR9QuZua2GZxC77sSrnG5wUpv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43391837fb71a30-OSL\r\ncontent-length: 105184\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105184,"size_decoded":105920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105184, version 1.0","md5":"f92d2db85594215e2a4d135561897188","sha1":"0fdff68c4027cf421d605798a1de46a061d160a3","sha256":"c3b2ff62e3ac4219811de0c709bd0d81d962a88dc87a598ac19b20f58f960136","sha512":"b532fda93bed9ff05432462a5f4c13ea4b859648032aaafbe339b864dc2a36cfe71a46dede923019a07c7d40b8828aa47127eac3ca1a5dadf8eeef490e5a6ae7","ssdeep":"3072:3nnudHFZEJd5hdHjvd4IbIsmhHTw37DuFs2:3niFZED5hdDLIsmFTwQp","tlshash":"97a312e55ca5b3c58fe0344e663fbe95a181ae514accc7118aca142b4bcd21dfae074f","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-10-11T19:02:52.938657Z","times_seen":1843,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":818,"receive":516,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:02.689Z","timestamp":1790774882689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.12 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Feb 2024 14:36:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65cb7e58-4926\"\r\nexpires: Thu, 01 Oct 2026 01:28:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEZQpjsejjc9v2MKWnPYLnvQXovpS4ILb2libHFxnECZdHWYXAjpeOFjQ7W%2FgjJ8X7x8QGYQiUDoflVS%2FsnQ14TliUaqXDPcE%2BKEyDkirBqEci%2FWfMkoRPrDhPtkOzLsghkF\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4339188c94a1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18726,"size_decoded":5930,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15752)","md5":"b976b651932bfd25b9ddb5b7693d88a7","sha1":"7fcb7cb5c11227f9213b1e08a07d0212209e1432","sha256":"4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3","sha512":"a241ebdcfaf153d5c2a86761145b2575cbe734b4f416acbfac082ae5c6eb7c706bd6ca3bc286b7e1a0f9e326729252dcb95b776750c4a3a0d81f2aa6258ea39f","ssdeep":"384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr","tlshash":"7182f99bb33a4e9f343e3bd78e968f4dc5da555321c0f078dbeeb68169a00568274c90","first_seen":"2024-03-13T16:02:37Z","last_seen":"2026-10-11T19:44:33.558716Z","times_seen":105494,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/favicon.ico","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:03.090Z","timestamp":1790774883090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://one2pay-home.com/favicon.ico/\r\nx-redirect-by: WordPress\r\nx-cache: HIT From one2pay-home.com\r\nnginx-cache: HIT\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKBBHwKTqIT15UTefs8nyZn03nN1Y6jqZJ6%2BD95v3Tjhaya4qhAm9VA0Sdb8Sp9PaQ5Wg6ADklefRH4J3OoqUImxpmMihgj5Tkg1dbpRKD3blQrhvbutJaVqZWI7PVFsQM0Y\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a433918b5a111a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/blocks/navigation/style.min.css?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:00.970Z","timestamp":1790774880970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=6.5.12 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 20 Feb 2024 11:16:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d48a0a-4064\"\r\nexpires: Thu, 01 Oct 2026 01:28:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsRPGfWj8k6zgmcQyDaO82%2F%2Fs%2BEFzAJQ%2BvqdQftDvTzWwqxpnA9bsDwA0ggoE8QxMv%2BK9NSDkbeE0jWqbK4twB0gBA42Wu9MAtaNrM5SQzfgr1atRnrwZhjTrIqFnB3f4rQD\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a433917e1e721a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16484,"size_decoded":3125,"mime_type":"text/css","magic":"ASCII text, with very long lines (16484), with no line terminators","md5":"a01294d3966fbaaaa8fb1800eb629e2a","sha1":"a75edf5442c196d670e436c2f616ecd595e41d68","sha256":"e2af3d1fbe48af4fa4e2294de3661b895af5c489a7d2ce5888cd14d5f070e78b","sha512":"07a68734091a7487a6896063bcb9fefe8f379e18c654ceb3f5436fcd9d50c2473ca99da285ce1e38b7e8d76d9f5ec66b17f29726137021e6cadfb25caf5ef71c","ssdeep":"384:CYsFvFy7E9bGUg5eyH9iX+/UYv/kLR37/:CYsFvc7E9bGUg5eyH9iO/UYv/kLd7/","tlshash":"6172afd04bb49cf4a9bb933b6e4490184633e942c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2024-04-06T04:37:53Z","last_seen":"2026-10-09T00:00:48.0888Z","times_seen":520,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/blocks/image/style.min.css?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:00.972Z","timestamp":1790774880972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-includes/blocks/image/style.min.css?ver=6.5.12 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Feb 2024 18:22:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65c66d5e-1b89\"\r\nexpires: Thu, 01 Oct 2026 01:28:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3uIlxE7BYrC6XBlfvkgLeSv8DhekrZAlHxf8YMyj8bQNVJ0lbNzeBD8siUXkX7P16t31UPowv83c4PqmgrKH75NKuZPIxQIjfFGVLdbI3JeOl7MlU03nCWTgQpk0JQS3tD6\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a433917e1e731a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7049,"size_decoded":2371,"mime_type":"text/css","magic":"ASCII text, with very long lines (7049), with no line terminators","md5":"cadbd32c2fb5384ecdbc11c6f40f7354","sha1":"105a2ff003b77aefd61ecfb419b4690caa4c47bc","sha256":"83a7ae658589063a7cc61e1a1403ffb16afc41084aa8b0f7cf0f1582601e67d6","sha512":"dfe49ff4960779ab61e336b838fa3d7afd316a0eb65c16b9624d52b5388de63f5c756137e3111b58441b3f3b872f0892d1ba72c77806d4d0f00ea60f68ab3cba","ssdeep":"96:RJbuPylrPhbPGwrsHy8JMyPLh79ROdAZG6O+ml5yLrAvwZV4D9XiQpeiX:fbuPW7kS8JMyP97Cy5mHyKyUlr4C","tlshash":"36e14421535094b695ab8327348a93e80719fbc3ef9de78d7056c302d2c769a0d77f0a","first_seen":"2024-04-06T04:37:53Z","last_seen":"2026-10-09T00:00:48.116145Z","times_seen":230,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:00.978Z","timestamp":1790774880978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 04 Oct 2023 17:02:26 GMT\r\netag: \"651d9aa2-30c2c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDArhbUm1hQojF8rTqIh%2FZ4G8i9msFD06lXqEEVDew8DFZjrRYRuGpQaIOqwU5HOKcRf4GqTyB01P%2F0UBK73xT6cZTV574gL92ey16eT3ldslsnnh2bURoNKAaub9A8dnC7u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a433917e1e771a30-OSL\r\ncontent-length: 199724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199724,"size_decoded":200459,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2af7c6205191cb22f5184bfb4c8e47a3","sha1":"6804bf960deaa7ce32a32d8908cff9df0b157772","sha256":"7ab1e25df9f0e9825e577187a3c73ebda9c0a068d9b35d2a235b8e924b9c58e5","sha512":"d840754c2657e09975c1d041d2285c67b97b9bacfe77d01d78ecbb5bf4e29eae691a6853cf933e829cf7c201085301f8b4cad7f1f3cd5b4d7e16e675c6f2caa4","ssdeep":"6144:ZETkYnSyNylu2wvIbCS+liXoCW+neFY75YnN:okYSluxaCRl4eqVw","tlshash":"041423038edb316bd4f078b0cb400a8007b489af9764a9768ef2da756617278b3f5d1d","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-10-11T15:43:05.834927Z","times_seen":1462,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":661,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:00.979Z","timestamp":1790774880979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 04 Oct 2023 17:02:26 GMT\r\netag: \"651d9aa2-103b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8f5kBRf6LSeQCrb8BvCNgiaRuQmRbZcko2QIZJzNay5rNuchiI%2BR7vuRDuFaX4Pmpj2FBzcKfclZIc%2Bkq3iFtleuCDSdjWH7xbgMeJzDJnaUttAg0VcATSHkryEE6qem13u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a433917e1e7b1a30-OSL\r\ncontent-length: 66482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66482,"size_decoded":67214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d03dae46404d16f0ee5b13cb3794a29","sha1":"5d2c6cd3d8d2c412281237628073e451257716e4","sha256":"0fc42e518e17733d6c766ceec3a2154896e332571f130fae27e4f20480e0980c","sha512":"9e33b9c236183e7d3c9e7cf27fe8c7d47c7769a008b025c716b5c5cfcdcb0331cca6181fcdeaa19dea48d8f2ebbcc1d4fd76f81e540ec08898a62acf56262aff","ssdeep":"1536:gmuYP0ZH4syavVBIvDbkA0ch0a7ZzTIdHq:gm/0ZH4Ar4Ph0E1SHq","tlshash":"d25302b3da071c5ed7eebf70c91a601208ca7d8ad9f30393c612cb66565624827d68f7","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-10-10T23:11:28.656949Z","times_seen":1466,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-includes/js/dist/interactivity.min.js?ver=6.5.12","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:01.811Z","timestamp":1790774881811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-includes/js/dist/interactivity.min.js?ver=6.5.12 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 May 2024 20:31:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6633f81c-890d\"\r\nexpires: Thu, 01 Oct 2026 01:28:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHB8zyCPpVzAhqCxgByU9HwT3rQCc8cpP5oTk3FOMe5LHc8VOWhaBq0gJy0tsKODLZb1craDSVUCTOjGm41vvLhVsLDttQNczVupmJtelQ2YaOdk8tTt1s7vO24%2FTXPJ5njC\"}]}\r\ncf-cache-status: MISS\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43391835f981a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35085,"size_decoded":13980,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35050)","md5":"dae4309ccac590262c4e6914f1bdee42","sha1":"94d22d48979f46560d1c7ff46978bfd4b67aebec","sha256":"df8d3d01743dad99fb13e9a7f1e1d1705e403eab0576dd1a81c45fcc42086a5b","sha512":"c157902e643d1779a3aa8eb0496e8615228e11b1afb76d53fd1c9409583c50302b8970d993ba42fcaa468b196ed60e32d053e1f66c4afc125db1631661110093","ssdeep":"768:Wh/w9POhKH5e7q2Y9VkujcFlk3HIRPrxkyRQZLC7jl7eLFLN8l9UbIY:WhY9GU5Kq27/wMVkyRQJOZ0FB8Qb9","tlshash":"2af2e8a4b174f03143ea50a6907f491af336662c744ec0d0b766e5e63cb924f60a7f7a","first_seen":"2024-05-08T05:56:10Z","last_seen":"2026-10-09T00:00:48.064804Z","times_seen":204,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:01.835Z","timestamp":1790774881835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2 HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:02 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 Sep 2023 16:46:22 GMT\r\netag: \"65130ade-23a8c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tnul0XviREv2ndGKw%2FCx887QgdGCkCdxxmpBfgi%2FVCCyjUbJ3mvSAftTCYtZiczyT47HnsZLoqI0wB%2BN3yVWGtiubuVRG4R48%2FUpaCtm%2Bun4D1276fbnkKZt259FWY1Wa29f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43391837fb61a30-OSL\r\ncontent-length: 146060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146060,"size_decoded":146802,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 146060, version 1.0","md5":"b782b01afc9646c7259701b07e2a71d0","sha1":"b86a6f0bf3fb4777160165dfe37ca4e99b90216e","sha256":"aa8042a77500cfe4a4893e2b7edbd54dded92768e40418fa0665bec8aae9ae18","sha512":"5f727d90952c324dfb9447c4ef702166844e456c614934bc266be072ed8ca681f8246cbc98b653fa45c6579bdad24dfaad04ebe8300f34774ed137254d208fe3","ssdeep":"3072:86eYDlgQh72091K9MIMjeIHT8edPDfeLSyxJjQ:84ZNh720IMIA8eoj8","tlshash":"e6e31376e110fc9723a55a5c1033a4b82a4ea8e7c188f0d4d1ef4a86effd46646c702f","first_seen":"2023-11-07T21:49:08Z","last_seen":"2026-10-11T20:43:56.555816Z","times_seen":11613,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/favicon.ico/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:03.898Z","timestamp":1790774883898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /favicon.ico/ HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://one2pay-home.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://one2pay-home.com/index.php?rest_route=/\u003e; rel=\"https://api.w.org/\"\r\nx-cache: HIT From one2pay-home.com\r\nnginx-cache: HIT\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcThVB1vlXAdH5kyxINWavPyph%2BtSS1hCzYsEy64Jo7UBBLwMnQGmCK3n4r3FvWLGyxGOTQpJeFgJ4HnkJFlaDrJLApqnbh2uASYIAt0VtJDNC7Em7nbHRbleBoE%2BOB3TW5d\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43391905b7f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.5.12","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84830,"size_decoded":16781,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20410)","md5":"995703ecb290c1d1bf4c7e3cbdc46e11","sha1":"8c4dc707b58d860f707efab6375a6385c044e810","sha256":"1550ea576cdaa6c42e2b596c09f4d601db797a3a441669d140fec173e81b3978","sha512":"69e0fdcb3d9f3d7349b79573171332bfb1b509e627ecd0d54544623fe0c197e658389f9d55170a0bb33a213a149ec2ef9e5cd44f0763e55924fee4179a8423d2","ssdeep":"1536:n2MapQQG2ZVz0IFHdmd6ZMpX4wvSAIXuTt1d:n2LeEdmd6ZMpX4wvSAIeTtv","tlshash":"be83a46053b448f97d3b836dc584b729b648ed21ce8566e6b4e2d05868ccdb70ab730f","first_seen":"2026-09-30T13:28:42.973502Z","last_seen":"2026-09-30T13:29:42.438066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T13:27:59.843Z","timestamp":1790774879843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://one2pay-home.com/index.php?rest_route=/\u003e; rel=\"https://api.w.org/\"\r\nx-cache: HIT From one2pay-home.com\r\nnginx-cache: HIT\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mva8lN7Oeh7vVh4sjSqjsgAYKym1bTm9lcUHnxforiNhBMPOMU9jLeDOls%2FlstsmVXu6M1y437v0bqp4yLkR%2FSzL8kvCn33nA3NuYmFBmUJ8f%2FHslTbF1S8tkk8XyPGcA1Qi\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43391773cb71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.5.12","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84830,"size_decoded":16782,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20410)","md5":"995703ecb290c1d1bf4c7e3cbdc46e11","sha1":"8c4dc707b58d860f707efab6375a6385c044e810","sha256":"1550ea576cdaa6c42e2b596c09f4d601db797a3a441669d140fec173e81b3978","sha512":"69e0fdcb3d9f3d7349b79573171332bfb1b509e627ecd0d54544623fe0c197e658389f9d55170a0bb33a213a149ec2ef9e5cd44f0763e55924fee4179a8423d2","ssdeep":"1536:n2MapQQG2ZVz0IFHdmd6ZMpX4wvSAIXuTt1d:n2LeEdmd6ZMpX4wvSAIeTtv","tlshash":"be83a46053b448f97d3b836dc584b729b648ed21ce8566e6b4e2d05868ccdb70ab730f","first_seen":"2026-09-30T13:28:42.973502Z","last_seen":"2026-09-30T13:29:42.438066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":0,"dns":6,"connect":20,"send":0,"wait":876,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"one2pay-home.com/wp-content/themes/twentytwentyfour/assets/images/windows.webp","fqdn":"one2pay-home.com","domain":"one2pay-home.com","tld":"com"},"ip":{"addr":"104.21.11.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://one2pay-home.com/","date":"2026-09-30T13:28:00.981Z","timestamp":1790774880981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"one2pay-home.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 27 Sep 2026 13:36:19 GMT","end":"Sat, 26 Dec 2026 13:36:18 GMT"},"fingerprint":{"sha1":"25:FD:E2:0C:AE:04:D3:FF:AC:85:85:93:09:F3:95:04:C8:D6:3E:66","sha256":"87:1F:5D:9C:24:7D:A0:A3:DB:AA:08:E1:B3:AC:22:F7:7D:25:6F:9B:49:BE:34:5F:29:FC:EF:48:3D:E1:02:77"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/windows.webp HTTP/1.1\r\nHost: one2pay-home.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://one2pay-home.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 13:28:01 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 04 Oct 2023 17:02:26 GMT\r\netag: \"651d9aa2-1ed24\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4egpQctnBRITV6V6JpqtLvuAGVaa2gyXSnjHLnc70sNH5CIGA33X8l7CPUmyF27b1EwBr%2BXB1ep47gM3O%2By5ilVg9XpetkoTWd74tM2eJ2ZkDwrmWX3rXKDwUkF7Gh1Aboj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a433917e2e7e1a30-OSL\r\ncontent-length: 126244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126244,"size_decoded":126977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c8ab14e61504d8290608dd62812840d","sha1":"18a3284f7b5ec684211dc355fe2ae56b30639a9e","sha256":"a8b72c3a34a4ac883406005c0fab343d64894c978b3dda1b6bb00eed01e9409e","sha512":"a004a16cc557e9e9cec3f36af8fda796966f7f4d16f11bca1761b350a81cd122048cd2742ccb2beffc4501dcb2746f64cd33f3356575b9cd74de590c56127d69","ssdeep":"3072:sdZsaKCAD83OCerX+GoIKSQgGfMB/WhLQPR2lMvjBy4piYbXxxzY:sdZsxDqKrXSvgS8PcGvmYdxc","tlshash":"ecc312fe0a6c538eca4f077ae3a1ee494151b71673e09053e9ac41d79820437f65abd4","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-10-10T23:11:28.668027Z","times_seen":1453,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":585,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"one2pay-home.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}