{"report_id":"7c031531-9775-4e1c-b967-b94dcaef0224","version":6,"status":"done","tags":[],"date":"2025-09-08T00:57:23Z","url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"104.21.42.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"title":"PayPal $1000 gift card"},"submit":{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"104.21.42.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T00:57:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-08","alert":"Phishing - PayPal Inc.","trigger":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","verdict":"phishing","severity":"medium","comment":"PayPal Inc.","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"im.nbpublic.com","ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-09-14","domain_rank":124690,"first_seen":"2025-04-19T04:52:49.370517Z","last_seen":"2025-09-04T08:12:35.694514Z","alert_count":1,"request_count":11,"received_data":195373,"sent_data":12713,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"perfectgiftchoice.life","ip":{"addr":"104.21.8.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1844871,"first_seen":"2025-09-08T00:57:23.439815Z","last_seen":"2025-09-08T00:57:23.439815Z","alert_count":0,"request_count":1,"received_data":585,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/main.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67bc5e7dea3fd64baffc3b391c4b17c1","sha1":"7da86e9514775f4da8a21b9c7113c4680a94e5a9","sha256":"3c8a2e5c735803d44db3722fa2d031e661559b541f899a56ae791b0a30e50703","sha512":"5788737996bf35735992eb48f52369cedb2a8c12536d16379a59a5327b74be9959b3563300fb8866c083b7b78557157d87f656f2109b19d323bcea088d8de3a4","ssdeep":"96:7Rr6AvphjQIcv7ha7ha7h1AAsPyxiNMf+YG7qyGXk1CSGuSsSy764p+lypfUIBGr:9rrvphbcDhGhGhv+5+yGXkQSGukRlqfO","tlshash":"e1b1ca1c76f72a22683771362bbf42043774c5071409ef25b98d6ad80f8c56da6fe6a8","size":5131,"data":"","first_seen":"2025-09-08T00:57:27.341438Z","last_seen":"2025-12-10T03:34:20.983263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/cookie__app.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f056368b343762f1c757c7dbdc8fff1f","sha1":"81ebde5ef2bd70712c1f1e893e7204c7262f48e3","sha256":"8243df00e19c1c24c8c7afb66095fa41df30056a760a1245d9345e9b5995334b","sha512":"016d9c6974069e9edf9967451d409444034e8e572afbbda7162d1c65a5ef1af750fede569c6b317febc4db7e9a31492bffadc9b5a796bcc6c732b0c4bea6b1bd","ssdeep":"","tlshash":"b4e06870bd39253903359429b0ffcb02703811050c806508183a5431eeb9dcb2c73aea","size":362,"data":"","first_seen":"2025-09-08T00:57:27.344342Z","last_seen":"2025-12-10T03:34:20.974152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/jquery-3.7.1.min.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-03T22:25:14.756982Z","times_seen":136112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/gsap.min.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ceffd5b35d350764ce6cb72313190f5","sha1":"1a8bcae2241d253c1a41050b20c840d29878f3ae","sha256":"6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f","sha512":"1fa70f9bdec502c8082a6941038b3bef8beaa0ddb857981240be320530ce636b2ed837976558503f114ae0fe863dd9d9a8cf5f8351b770cbf9c03edee9c14b65","ssdeep":"768:GmL8a79w89JOwpv6bX+/wkRSOPNKb9c/Ep7Hvdn9a/53LcRL09EcylDCc14E2Odq:GmAaBw8BpGX8kThzJE11WV1TjU","tlshash":"e853e9dd3292f427029651a1447f0a4bf337a958640f0918f269e4cd7d3c9ae42bbf7a","size":64148,"data":"","first_seen":"2023-03-07T12:08:40Z","last_seen":"2026-04-03T15:25:40.21604Z","times_seen":922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/cookie-style.css","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=N4Igdgpg7g+gFgSwC4wQExALhABgIYBMAzGjjgOwC0aAbACx2V3kBmVARkQJwCMlRBCAGM6eAKxcIOABzkQAGhAA3BAGdkqDNi40uQkXgiVy5HOyZ0INStJZCqXNEIJicLOkSJC8C5Wo1ICAC2EKpIeEEADlggBDgulDhcieQAKmSYdASYBFwAdFw6AFq+KupIAPYATpoxYuSeLHhCOJTsPKZM7IQ2QjR8aDzS0h04+nT4vt5ReAgA5mC12DTS7DRi0kLSOGJoEOykODwE5DzsQiwQvmAVe0u4MDzXtxAwSACekVfYADJ4YGgEGA5s87kI4LMwFgANoPJ4AXUUkSqoQgABthEgIGgYDc9lhQB8vjE/gCgSDFOEqnMICh0DEVlw6GJcmguER8GIWkcCIIiOsaKDXvTsDhHtcIAAPJAEkBE74gADyLEuVV8VJpdK0IBW7Ti7DEeDwaCIhrIxxZQnagsUeOF2rFjoAPmKeDAcC6YAR3RLpVgwABXNFogC+IcU4MhMEiFXKCAqUMwoCEAaqKLASAAci8AJIAqVYHCKdhVf7gvOAoShGHw8MgNQwFGAlFCGWYJBVAMQRQAR1U0STdYbkCgWCaaNUEBDQA/","date":"2025-09-08T00:56:58.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/cookie-style.css HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=N4Igdgpg7g+gFgSwC4wQExALhABgIYBMAzGjjgOwC0aAbACx2V3kBmVARkQJwCMlRBCAGM6eAKxcIOABzkQAGhAA3BAGdkqDNi40uQkXgiVy5HOyZ0INStJZCqXNEIJicLOkSJC8C5Wo1ICAC2EKpIeEEADlggBDgulDhcieQAKmSYdASYBFwAdFw6AFq+KupIAPYATpoxYuSeLHhCOJTsPKZM7IQ2QjR8aDzS0h04+nT4vt5ReAgA5mC12DTS7DRi0kLSOGJoEOykODwE5DzsQiwQvmAVe0u4MDzXtxAwSACekVfYADJ4YGgEGA5s87kI4LMwFgANoPJ4AXUUkSqoQgABthEgIGgYDc9lhQB8vjE/gCgSDFOEqnMICh0DEVlw6GJcmguER8GIWkcCIIiOsaKDXvTsDhHtcIAAPJAEkBE74gADyLEuVV8VJpdK0IBW7Ti7DEeDwaCIhrIxxZQnagsUeOF2rFjoAPmKeDAcC6YAR3RLpVgwABXNFogC+IcU4MhMEiFXKCAqUMwoCEAaqKLASAAci8AJIAqVYHCKdhVf7gvOAoShGHw8MgNQwFGAlFCGWYJBVAMQRQAR1U0STdYbkCgWCaaNUEBDQA/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQ0NHyS%2F976nlqJqAbw1g%2FbFK%2FJxxsiNlPN4PUQgjmYMGrBucYJa%2FVBAkf4qo%2BVKQbitYOOUJrLL85%2BgmeiLNI065xnT1X5%2FnuqMmik4%2FA%3D%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68944750-3cf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d370d3835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (974)","md5":"e54e70553549091915c55a55cd1829da","sha1":"1cadf293bff4bca75752a7be535cea6bf94648ee","sha256":"f4f941b9ceff0136558344bed43312f7ef99d3f847eadb7de37ae2ff732cd3c9","sha512":"768ce9413d0844fc8d771583e8c90135c0009e171c6bc5e90fb6ede2b6f303a2c686b76223a2925de63fa69d4daf5068f38aa984f6cadeb4ecc316f08b1a36f2","ssdeep":"","tlshash":"46112142e5bc180ee323d3115294a557403c0461e97b4edda196fe7d8f490963d23e0f","first_seen":"2025-09-08T00:57:27.327684Z","last_seen":"2025-12-10T03:34:20.977933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/prize.png","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/prize.png HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z89aDRz958konL0Eqph%2FSqrtY5c8l0mCrVkOmwE%2Fm6cMBuEzAeaSB4s6HZF9A3Stup6HkHVfVdA0gsCY97LTGdHpxbtJYXOUKAUp2kG%2FxA%3D%3D\"}]}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 97ba7d372d3d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"53af31e7db16798a3084b119b5cf8487","sha1":"6ec82963bafb3ca8836928c9ac728df07dfa6af1","sha256":"367e9675c3ca59fee4d8fae53422319b324d6e6238748d7424837568f0f23d5e","sha512":"dd9376bdd31bf2e475aeda8c749014d5da3442aa2045784665b36f553c47606a97745ac27cb6dce65e45e0a0ff97d4a7ddd4659bd9eccc2ed568151b071a3b00","ssdeep":"","tlshash":"aac02b6d3513bc6cc563317422c37480c0c6833764be81128440810331cf3998ac3397","first_seen":"2023-11-04T12:47:42Z","last_seen":"2026-04-03T19:04:02.678981Z","times_seen":378,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/jquery-3.7.1.min.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=N4Igdgpg7g+gFgSwC4wQExALhABgIYBMAzGjjgOwC0aAbACx2V3kBmVARkQJwCMlRBCAGM6eAKxcIOABzkQAGhAA3BAGdkqDNi40uQkXgiVy5HOyZ0INStJZCqXNEIJicLOkSJC8C5Wo1ICAC2EKpIeEEADlggBDgulDhcieQAKmSYdASYBFwAdFw6AFq+KupIAPYATpoxYuSeLHhCOJTsPKZM7IQ2QjR8aDzS0h04+nT4vt5ReAgA5mC12DTS7DRi0kLSOGJoEOykODwE5DzsQiwQvmAVe0u4MDzXtxAwSACekVfYADJ4YGgEGA5s87kI4LMwFgANoPJ4AXUUkSqoQgABthEgIGgYDc9lhQB8vjE/gCgSDFOEqnMICh0DEVlw6GJcmguER8GIWkcCIIiOsaKDXvTsDhHtcIAAPJAEkBE74gADyLEuVV8VJpdK0IBW7Ti7DEeDwaCIhrIxxZQnagsUeOF2rFjoAPmKeDAcC6YAR3RLpVgwABXNFogC+IcU4MhMEiFXKCAqUMwoCEAaqKLASAAci8AJIAqVYHCKdhVf7gvOAoShGHw8MgNQwFGAlFCGWYJBVAMQRQAR1U0STdYbkCgWCaaNUEBDQA/","date":"2025-09-08T00:56:58.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/jquery-3.7.1.min.js HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k0whVwSVBlZGlwrGGPvSMwkTVdbXSwnYPbs3Fjv5c%2BS8O2eGqNz4vfliXbJrUfPrKUzNKuwJaPZRBnmdyk6kB1eFlvxDgJ18K5BF34VdtA%3D%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68944750-155ed\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d371d3a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-03T22:25:14.756982Z","times_seen":136112,"resource_available":true,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/visa-logo.png","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/visa-logo.png HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCYU%2BeI%2BpJB2wEo58pzLLVLW1hnM5DWDaZKRbpxDLBJPXGT9OIP1gdCuOeCivTLgHgTUTIMqL293wCetDQ9%2BCkGkVDK4OEdULoT1lihpnQ%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\netag: W/\"68944750-1232\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d372d3e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 68, 8-bit colormap, non-interlaced","md5":"f271a0652cac3c4a193e899090a663ab","sha1":"ee33589ef7cf18eb638607067f29972abea43c1a","sha256":"8ced1239a50d393196c83db343bc626417948d5f9cc521e642ac52909068561b","sha512":"0d26414e0a48beb9a8f7d5d6948ff0de50975937ed9ad0e5fd5aa594ddb0229b4bcc313df5a7ed07e80cce6fa17e13f344eb479b17679619b1bfdf63a54b6b0b","ssdeep":"96:J2E+eDnWhylfZliPFg3X41T2/qWKok68X7cdwvPpPCL:bWhylfZQPF+EaSLokCwHhCL","tlshash":"63a14c81af551202b4c2dfce19f68413ca4b4d90d4c48ea2f2def77c28759b4a67a2d5","first_seen":"2025-09-08T00:57:27.333687Z","last_seen":"2025-12-10T03:34:20.971293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/visa-logo-sq.png","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/visa-logo-sq.png HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NROOu4zCpTX6EtopR%2F9BMQ6PwGnYmG5%2FZc0PnUZu%2Bk25HtAB0EUzDpKeGHkR6CYXM7CUlTDuTb2%2FgvkmR%2F5uxPDV57cqCNxBpzTlQRDbA%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\netag: W/\"68944750-1a03\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d372d3f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 172, 8-bit colormap, non-interlaced","md5":"3e9593e2a0ae4816326ffa51d7ac2a4c","sha1":"896e0d78b96eed65d90607ae1754dfc862f77f35","sha256":"430cdacb8d21f61f7e41e8d9508d146fcacfbe415d2d9bd8e0ea2da25f862273","sha512":"ba7635410434497a7774bb254c377e6e2e9caebf5e72505ea6234798752e60d5cb284015ac9fb5f4163f6c4029712dd390e7dcd596ea4cd6f4fba17cca563d1f","ssdeep":"96:c2x05U4RC/QUf3D+Y0MtugyyjZve4tjsfsvrFOcnhFIrcTXM89Svbo60dsqta2AJ:5hSY0MkgyAtQsvrF3TIoT2MsCpAwc","tlshash":"8ed19d41e7304083be8dfe0b45eb685b92739c408591cadbcb9cb921f6341b48c78f82","first_seen":"2025-09-08T00:57:27.336249Z","last_seen":"2025-12-10T03:34:20.986776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/prize.png","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=N4Igdgpg7g+gFgSwC4wQExALhABgIYBMAzGjjgOwC0aAbACx2V3kBmVARkQJwCMlRBCAGM6eAKxcIOABzkQAGhAA3BAGdkqDNi40uQkXgiVy5HOyZ0INStJZCqXNEIJicLOkSJC8C5Wo1ICAC2EKpIeEEADlggBDgulDhcieQAKmSYdASYBFwAdFw6AFq+KupIAPYATpoxYuSeLHhCOJTsPKZM7IQ2QjR8aDzS0h04+nT4vt5ReAgA5mC12DTS7DRi0kLSOGJoEOykODwE5DzsQiwQvmAVe0u4MDzXtxAwSACekVfYADJ4YGgEGA5s87kI4LMwFgANoPJ4AXUUkSqoQgABthEgIGgYDc9lhQB8vjE/gCgSDFOEqnMICh0DEVlw6GJcmguER8GIWkcCIIiOsaKDXvTsDhHtcIAAPJAEkBE74gADyLEuVV8VJpdK0IBW7Ti7DEeDwaCIhrIxxZQnagsUeOF2rFjoAPmKeDAcC6YAR3RLpVgwABXNFogC+IcU4MhMEiFXKCAqUMwoCEAaqKLASAAci8AJIAqVYHCKdhVf7gvOAoShGHw8MgNQwFGAlFCGWYJBVAMQRQAR1U0STdYbkCgWCaaNUEBDQA/","date":"2025-09-08T00:56:59.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/prize.png HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ShmqElVFcxxLDsjm67pn2KgTOQkYxNTR8Ret0MA24bnWu8GRO9coeA7OOPvik4lWK6ag1sGFKB%2F5JwJi7vr9Jj6bitDHnWcICAjkBS1ag%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 97ba7d3d6dbb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"53af31e7db16798a3084b119b5cf8487","sha1":"6ec82963bafb3ca8836928c9ac728df07dfa6af1","sha256":"367e9675c3ca59fee4d8fae53422319b324d6e6238748d7424837568f0f23d5e","sha512":"dd9376bdd31bf2e475aeda8c749014d5da3442aa2045784665b36f553c47606a97745ac27cb6dce65e45e0a0ff97d4a7ddd4659bd9eccc2ed568151b071a3b00","ssdeep":"","tlshash":"aac02b6d3513bc6cc563317422c37480c0c6833764be81128440810331cf3998ac3397","first_seen":"2023-11-04T12:47:42Z","last_seen":"2026-04-03T19:04:02.678981Z","times_seen":378,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perfectgiftchoice.life/wp-content/themes/Newsmag/core/paypal-gift/favicon.ico","fqdn":"perfectgiftchoice.life","domain":"perfectgiftchoice.life","tld":"life"},"ip":{"addr":"104.21.8.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:59.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"perfectgiftchoice.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 23:30:14 GMT","end":"Sun, 23 Nov 2025 00:28:35 GMT"},"fingerprint":{"sha1":"4C:A8:C9:DB:ED:A4:14:2D:37:61:75:74:03:0D:FE:84:B1:51:3A:5E","sha256":"9D:4A:30:D1:9E:A5:55:94:DE:2A:C9:15:61:67:AC:5F:D8:9F:F8:B6:99:25:2C:4A:5F:41:F0:04:BD:A4:69:0C"}}},"request":{"raw":"GET /wp-content/themes/Newsmag/core/paypal-gift/favicon.ico HTTP/1.1\r\nHost: perfectgiftchoice.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 08 Sep 2025 00:57:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMF33ZVyVDbGHqaFZhHYvHC9YOqroIpWiNJq7DEOeHlqDHWb3lMie%2FDUtH%2Bub42V4o8SDXmyVJwOpuPZlDmjD8jtKD%2FU4aHgQ08Wo9BcB1WMB72C\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97ba7d3e4e9f5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T22:31:02.952373Z","times_seen":13306102,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":71,"connect":1,"send":0,"wait":231,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/gsap.min.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/gsap.min.js HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCAMFU0hWj0bWVG1JlrglW2Ww6JQ5NBFznIVyG9%2FFbNAy5ilRXOpjheKqdWFDQDMXTheLPEq2kbJ0FszrVJJdYNlfJ4qNdRyeZJ681za1g%3D%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68944750-fa94\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d371d3b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64148,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63851)","md5":"6ceffd5b35d350764ce6cb72313190f5","sha1":"1a8bcae2241d253c1a41050b20c840d29878f3ae","sha256":"6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f","sha512":"1fa70f9bdec502c8082a6941038b3bef8beaa0ddb857981240be320530ce636b2ed837976558503f114ae0fe863dd9d9a8cf5f8351b770cbf9c03edee9c14b65","ssdeep":"768:GmL8a79w89JOwpv6bX+/wkRSOPNKb9c/Ep7Hvdn9a/53LcRL09EcylDCc14E2Odq:GmAaBw8BpGX8kThzJE11WV1TjU","tlshash":"e853e9dd3292f427029651a1447f0a4bf337a958640f0918f269e4cd7d3c9ae42bbf7a","first_seen":"2023-03-07T12:08:40Z","last_seen":"2026-04-03T15:25:40.21604Z","times_seen":922,"resource_available":true,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":333,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/main.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/main.js HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weTwNVazr%2Ft3CLaQw16um1R3PJtoI4x9kxyWypokGcHlPhfC7ajOaZMyXcbDddCwOIrb7mGJLkJlciInAzFD3s6h5MJh9lY13w3saUPvHA%3D%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68944750-140b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d372d3c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5131,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"67bc5e7dea3fd64baffc3b391c4b17c1","sha1":"7da86e9514775f4da8a21b9c7113c4680a94e5a9","sha256":"3c8a2e5c735803d44db3722fa2d031e661559b541f899a56ae791b0a30e50703","sha512":"5788737996bf35735992eb48f52369cedb2a8c12536d16379a59a5327b74be9959b3563300fb8866c083b7b78557157d87f656f2109b19d323bcea088d8de3a4","ssdeep":"96:7Rr6AvphjQIcv7ha7ha7h1AAsPyxiNMf+YG7qyGXk1CSGuSsSy764p+lypfUIBGr:9rrvphbcDhGhGhv+5+yGXkQSGukRlqfO","tlshash":"e1b1ca1c76f72a22683771362bbf42043774c5071409ef25b98d6ad80f8c56da6fe6a8","first_seen":"2025-09-08T00:57:27.341438Z","last_seen":"2025-12-10T03:34:20.983263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/cookie__app.js","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/cookie__app.js HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiIPpm8vrAFX0%2BEOKlhQ1oZeEC3GHQ3ngBhkswxmRB7YQl2GtFvVtNYyeHzOxqR88ykvXuPzX%2Fa81wpyYCP6wW4H5EsuT2uuDyQraOx1nQ%3D%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68944750-16a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d372d4035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (359)","md5":"f056368b343762f1c757c7dbdc8fff1f","sha1":"81ebde5ef2bd70712c1f1e893e7204c7262f48e3","sha256":"8243df00e19c1c24c8c7afb66095fa41df30056a760a1245d9345e9b5995334b","sha512":"016d9c6974069e9edf9967451d409444034e8e572afbbda7162d1c65a5ef1af750fede569c6b317febc4db7e9a31492bffadc9b5a796bcc6c732b0c4bea6b1bd","ssdeep":"","tlshash":"b4e06870bd39253903359429b0ffcb02703811050c806508183a5431eeb9dcb2c73aea","first_seen":"2025-09-08T00:57:27.344342Z","last_seen":"2025-12-10T03:34:20.974152Z","times_seen":2,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=N4Igdgpg7g+gFgSwC4wQExALhABgIYBMAzGjjgOwC0aAbACx2V3kBmVARkQJwCMlRBCAGM6eAKxcIOABzkQAGhAA3BAGdkqDNi40uQkXgiVy5HOyZ0INStJZCqXNEIJicLOkSJC8C5Wo1ICAC2EKpIeEEADlggBDgulDhcieQAKmSYdASYBFwAdFw6AFq+KupIAPYATpoxYuSeLHhCOJTsPKZM7IQ2QjR8aDzS0h04+nT4vt5ReAgA5mC12DTS7DRi0kLSOGJoEOykODwE5DzsQiwQvmAVe0u4MDzXtxAwSACekVfYADJ4YGgEGA5s87kI4LMwFgANoPJ4AXUUkSqoQgABthEgIGgYDc9lhQB8vjE/gCgSDFOEqnMICh0DEVlw6GJcmguER8GIWkcCIIiOsaKDXvTsDhHtcIAAPJAEkBE74gADyLEuVV8VJpdK0IBW7Ti7DEeDwaCIhrIxxZQnagsUeOF2rFjoAPmKeDAcC6YAR3RLpVgwABXNFogC+IcU4MhMEiFXKCAqUMwoCEAaqKLASAAci8AJIAqVYHCKdhVf7gvOAoShGHw8MgNQwFGAlFCGWYJBVAMQRQAR1U0STdYbkCgWCaaNUEBDQA/","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T00:56:57.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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 HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:58 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3kRcwn2r9LQS7BwKqAil2CFcEuXdVJ2OUyJwsMTVyrkF3e2ki74RX6JYH3aiwkzSGzY1MgKjwlNsYvHgSpYoBNjmi2WdEFYNNlQuFk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97ba7d319b35b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8648,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a5991fff547c759c954fdbbdcc01a68a","sha1":"232a96b468a7d711e40fa7b9fe07a78698e48086","sha256":"45de59e88e56de1abc2c4284ab5a4de460570683b444f30fa6ffd780c0b0d888","sha512":"2b003a5aa18eb65203bb13bcc54a9f08c4f28c7b43db7c3a4b74595f2e98fb6925307cd497367ed788574f090efbbf6f7dfb8f112a10445e28036ac20a0b4599","ssdeep":"192:/p/Tl2NYCEP5JJFhj7JVOSKlQt9Yj0czbTmdR:B8ywzQAtzbTmdR","tlshash":"c802b796d4f52a22118380a1ad6b6f077f68d007e70c0a0d7abe36f46fdaec68c5715d","first_seen":"2025-09-08T00:57:27.347144Z","last_seen":"2025-12-10T03:34:20.953623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":19,"dns":7,"connect":1,"send":0,"wait":630,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-09-08","alert":"Phishing - PayPal Inc.","trigger":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","verdict":"phishing","severity":"medium","comment":"PayPal Inc.","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"im.nbpublic.com/loading_page/paypal/paypal_cf_5/basics.css","fqdn":"im.nbpublic.com","domain":"nbpublic.com","tld":"com"},"ip":{"addr":"172.67.199.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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","date":"2025-09-08T00:56:58.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nbpublic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 00:37:51 GMT","end":"Sat, 29 Nov 2025 01:35:21 GMT"},"fingerprint":{"sha1":"2B:0F:5D:45:00:5E:A8:BF:8C:8E:25:B9:0B:96:B1:A8:DA:09:3D:5D","sha256":"85:BD:1D:FC:0B:93:80:37:D5:67:5C:06:3E:81:D1:C9:74:9F:C6:35:0D:BF:DE:4D:95:33:DE:74:6B:29:EC:4B"}}},"request":{"raw":"GET /loading_page/paypal/paypal_cf_5/basics.css HTTP/1.1\r\nHost: im.nbpublic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://im.nbpublic.com/loading_page/paypal/paypal_cf_5/index.html?lptoken=17cd5750203075be502c\u0026cep=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\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 00:56:59 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8u32lAGjqAwoJwI%2BtxEXzDwRwP1RORqn%2FwXD4APcfhH7NEXVkmpkZ6d2cCC0SYvLkOUYcqL1H5fk07SNEojoGNAgQJmIn4Kry6WTYJRhQ%3D%3D\"}]}\r\nserver: cloudflare\r\nlast-modified: Thu, 07 Aug 2025 06:27:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68944750-27a0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97ba7d370d3935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (402)","md5":"44cc5741fbba42b951221222330e2f3f","sha1":"f39146431166e2a77c3b77cafe9f6b6eb14ebf68","sha256":"faab7e08420161379b7e3c5492bd8809b0b8891bb9b4d8d362ba3222d4de78de","sha512":"204514013b78b1e352605a07c1056051c6a35c96e63d91b7794888ebc86f8c9e32bc09c374c91c645d80d46a7b8378eb91367673a1c1f4244aa69893a0bd7318","ssdeep":"192:RKIIatfFFAjB2pSFAccXAXgWAZLjFQ4D4sdxAFL+S0bLz:5tF2wpSFQjFi2xAFL+SAz","tlshash":"e3223f9667a10208745bd4647ab79ba5333dc043a50fcefcabe234acee894e1057379d","first_seen":"2025-09-08T00:57:27.350671Z","last_seen":"2025-12-10T03:34:20.957678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}